[Git][security-tracker-team/security-tracker][master] Add initial tracking for new nodejs issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c57dbc72 by Salvatore Bonaccorso at 2025-01-22T06:00:20+01:00
Add initial tracking for new nodejs issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,12 @@
+CVE-2025-23085 [GOAWAY HTTP/2 frames cause memory leak outside heap]
+	- nodejs <unfixed>
+	NOTE: https://nodejs.org/en/blog/vulnerability/january-2025-security-releases#goaway-http2-frames-cause-memory-leak-outside-heap-cve-2025-23085---medium
+CVE-2025-23084 [Path traversal by drive name in Windows environment]
+	- nodejs <not-affected> (Only affect Node.js on Windows)
+	NOTE: https://nodejs.org/en/blog/vulnerability/january-2025-security-releases#path-traversal-by-drive-name-in-windows-environment-cve-2025-23084---medium
+CVE-2025-23083 [Worker permission bypass via InternalWorker leak in diagnostics]
+	- nodejs <unfixed>
+	NOTE: https://nodejs.org/en/blog/vulnerability/january-2025-security-releases#worker-permission-bypass-via-internalworker-leak-in-diagnostics-cve-2025-23083---high
 CVE-2025-23195
 	NOT-FOR-US: Apache Ambari
 CVE-2025-23196



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c57dbc72706a8b582d1427acfb9881dffe8eecef

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c57dbc72706a8b582d1427acfb9881dffe8eecef
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250122/78bd8a9c/attachment-0001.htm>