[Git][security-tracker-team/security-tracker][master] new jq issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d33dd8ce by Moritz Muehlenhoff at 2025-05-22T15:37:10+02:00
new jq issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -123,7 +123,8 @@ CVE-2025-48064 (GitHub Desktop is an open-source, Electron-based GitHub app desi
 CVE-2025-48063 (XWiki is a generic wiki platform. In XWiki 16.10.0, required rights we ...)
 	NOT-FOR-US: XWiki
 CVE-2025-48060 (jq is a command-line JSON processor. In versions up to and including 1 ...)
-	TODO: check
+	- jq <unfixed>
+	NOTE: https://github.com/jqlang/jq/security/advisories/GHSA-p7rr-28xf-3m5w
 CVE-2025-48012 (Authentication Bypass by Capture-replay vulnerability in Drupal One Ti ...)
 	NOT-FOR-US: Drupal core and addons
 CVE-2025-48011 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d33dd8ce63e3e3219532f058d871c76964d9c70a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d33dd8ce63e3e3219532f058d871c76964d9c70a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250522/a255bcc9/attachment-0001.htm>