[Git][security-tracker-team/security-tracker][master] Add CVE-2025-46653/node-formidable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ba2a8d7e by Salvatore Bonaccorso at 2025-04-27T17:49:46+02:00
Add CVE-2025-46653/node-formidable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,7 +13,8 @@ CVE-2025-46655 (CodiMD through 2.5.4 has a CSP-based protection mechanism agains
 CVE-2025-46654 (CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS  ...)
 	NOT-FOR-US: CodiMD
 CVE-2025-46653 (Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies ...)
-	TODO: check
+	- node-formidable <unfixed>
+	NOTE: Fixed by: https://github.com/node-formidable/formidable/commit/022c2c5577dfe14d2947f10909d81b03b6070bf5 (v3.5.3)
 CVE-2025-46580 (There is a code-related vulnerability in the GoldenDB database product ...)
 	NOT-FOR-US: ZTE
 CVE-2025-46579 (There is a DDE injection vulnerability in the GoldenDB database produc ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ba2a8d7ea1a59537283bbd2c379d50dec93f2157

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ba2a8d7ea1a59537283bbd2c379d50dec93f2157
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250427/8c3cfd41/attachment-0001.htm>