[Git][security-tracker-team/security-tracker][master] new ruby-sinatra issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a2fc2171 by Moritz Muehlenhoff at 2024-11-01T15:53:21+01:00
new ruby-sinatra issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,7 +11,9 @@ CVE-2024-49501 (Sysmac Studio provided by OMRON Corporation contains an incorrec
 CVE-2024-47939 (Stack-based buffer overflow vulnerability exists in multiple Ricoh las ...)
 	NOT-FOR-US: Ricoh
 CVE-2024-21510 (Versions of the package sinatra from 0.0.0 are vulnerable to Reliance  ...)
-	TODO: check
+	- ruby-sinatra <unfixed>
+	NOTE: https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-6483832
+	NOTE: https://github.com/sinatra/sinatra/pull/2010
 CVE-2024-10620 (A vulnerability was found in knightliao Disconf 2.6.36. It has been cl ...)
 	NOT-FOR-US: knightliao Disconf
 CVE-2024-10619 (A vulnerability, which was classified as critical, was found in Tongda ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a2fc217172cea96b4772a151d828fb7fd28ed4cf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a2fc217172cea96b4772a151d828fb7fd28ed4cf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241101/5f5d8188/attachment.htm>