[Git][security-tracker-team/security-tracker][master] spring n/a

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
abdddd02 by Moritz Muehlenhoff at 2025-06-13T16:21:53+02:00
spring n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -58,7 +58,8 @@ CVE-2025-47959 (Improper neutralization of special elements used in a command ('
 CVE-2025-44091 (yangyouwang crud v1.0.0 is vulnerable to Cross Site Scripting (XSS) vi ...)
 	NOT-FOR-US: yangyouwang crud
 CVE-2025-41234 (Description  In Spring Framework, versions 6.0.x as of 6.0.5, versions ...)
-	TODO: check
+	- libspring-java <not-affected> (Only affects 6.x)
+	NOTE: https://spring.io/security/cve-2025-41234
 CVE-2025-41233 (Description:  VMware AVI Load Balancer contains an authenticated blind ...)
 	NOT-FOR-US: VMware
 CVE-2025-39240 (Some Hikvision Wireless Access Point are vulnerable to authenticated r ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abdddd027ed80bc01fe64fc89b0f1d4f5bfde124

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abdddd027ed80bc01fe64fc89b0f1d4f5bfde124
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250613/97c8f7cd/attachment.htm>