[Git][security-tracker-team/security-tracker][master] new node-prismjs issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
75018dd1 by Moritz Muehlenhoff at 2025-03-03T16:11:35+01:00
new node-prismjs issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -91,7 +91,8 @@ CVE-2025-1723 (Zohocorp ManageEngine ADSelfService Plus versions 6510 and below
 CVE-2024-53386 (Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for  ...)
 	NOT-FOR-US: Stage.js
 CVE-2024-53382 (Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resulta ...)
-	TODO: check
+	- node-prismjs <unfixed>
+	NOTE: https://gist.github.com/jackfromeast/aeb128e44f05f95828a1a824708df660
 CVE-2025-1801
 	NOT-FOR-US: RedHat Ansible Automation Platform Gateway
 CVE-2024-12225



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75018dd1a0aaa6249f8a6406607ee4259b6079c2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75018dd1a0aaa6249f8a6406607ee4259b6079c2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250303/cc8f9095/attachment-0001.htm>