[Git][security-tracker-team/security-tracker][master] new php-nesbot-carbon issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cd116cea by Moritz Muehlenhoff at 2025-01-09T20:03:07+01:00
new php-nesbot-carbon issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,7 +3,9 @@ CVE-2025-22449 (Mattermost versions 9.11.x <= 9.11.5 fail to enforce invite perm
 CVE-2025-22445 (Mattermost versions 10.x <= 10.2 fail to accurately reflect missing se ...)
 	- mattermost-server <itp> (bug #823556)
 CVE-2025-22145 (Carbon is an international PHP extension for DateTime. Application pas ...)
-	TODO: check
+	- php-nesbot-carbon <unfixed>
+	NOTE: https://github.com/CarbonPHP/carbon/security/advisories/GHSA-j3f9-p6hm-5w6q
+	NOTE: https://github.com/briannesbitt/Carbon/commit/129700ed449b1f02d70272d2ac802357c8c30c58 (3.8.4)
 CVE-2025-20033 (Mattermost versions 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x ...)
 	- mattermost-server <itp> (bug #823556)
 CVE-2025-0344 (A vulnerability has been found in leiyuxi cy-fast 1.0 and classified a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd116cea8d7e934cc7c43ec87fa1bf55ee34fdfc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd116cea8d7e934cc7c43ec87fa1bf55ee34fdfc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250109/0354e09f/attachment.htm>