[Git][security-tracker-team/security-tracker][master] "new" node-sanitize-html issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c8f76fde by Moritz Muehlenhoff at 2025-09-09T09:26:32+02:00
"new" node-sanitize-html issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -79,9 +79,15 @@ CVE-2024-48341 (dingfanzu CMS V1.0 was discovered to contain a Cross-Site Reques
 CVE-2022-50238 (The on-endpoint Microsoft vulnerable driver blocklist is not fully syn ...)
 	NOT-FOR-US: Microsoft
 CVE-2019-25225 (`sanitize-html` prior to version 2.0.0-beta is vulnerable to Cross-sit ...)
-	TODO: check
+	- node-sanitize-html <not-affected> (Fixed before initial upload to the archive)
+	NOTE: https://github.com/apostrophecms/sanitize-html/issues/293
+	NOTE: https://github.com/apostrophecms/sanitize-html/pull/156
+	NOTE: https://github.com/apostrophecms/sanitize-html/commit/712cb6895825c8bb6ede71a16b42bade42abcaf3 (2.0.0)
 CVE-2014-125128 ('sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scr ...)
-	TODO: check
+	- node-sanitize-html <not-affected> (Fixed before initial upload to the archive)
+	NOTE: https://github.com/apostrophecms/sanitize-html/issues/1
+	NOTE: https://github.com/apostrophecms/sanitize-html/commit/889d4ec968e175f1905b2eb9d33f1fa89217cb02 (1.10.1)
+	NOTE: https://github.com/apostrophecms/sanitize-html/commit/423b90e06e1e85245eccedaabeb3a82840c6cd86 (1.10.1)
 CVE-2025-40930 (JSON::SIMD before version 1.07 and earlier for Perl has an integer buf ...)
 	NOT-FOR-US: JSON::SIMD Perl module
 CVE-2025-40929 (Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer ov ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8f76fde949ea95bd389a91ea2dde71db696596c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8f76fde949ea95bd389a91ea2dde71db696596c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250909/71ab05d2/attachment.htm>