[Git][security-tracker-team/security-tracker][master] new node-zx issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ddb0e803 by Moritz Muehlenhoff at 2025-02-06T14:20:48+01:00
new node-zx issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -536,7 +536,9 @@ CVE-2025-24961 (org.gaul S3Proxy implements the S3 API and proxies requests. Use
 CVE-2025-24960 (Jellystat is a free and open source Statistics App for Jellyfin. In af ...)
 	NOT-FOR-US: Jellystat
 CVE-2025-24959 (zx is a tool for writing better scripts. An attacker with control over ...)
-	TODO: check
+	- node-xz <unfixed>
+	NOTE: https://github.com/google/zx/issues/1093
+	NOTE: https://github.com/google/zx/security/advisories/GHSA-qwp8-x4ff-5h87
 CVE-2025-24958 (WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vu ...)
 	NOT-FOR-US: WeGIA
 CVE-2025-24957 (WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddb0e803d85460fe3432492e08e8a492c7370f69

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddb0e803d85460fe3432492e08e8a492c7370f69
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250206/5750bb4a/attachment.htm>