[Git][security-tracker-team/security-tracker][master] new node-uuid issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d23731b4 by Moritz Muehlenhoff at 2026-04-25T00:20:33+02:00
new node-uuid issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -52,7 +52,8 @@ CVE-2026-42033 (Axios is a promise based HTTP client for the browser and Node.js
 	- node-axios <unfixed>
 	NOTE: https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf
 CVE-2026-41907 (uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to ...)
-	TODO: check
+	- node-uuid 14.0.0+~11.0.0-1
+	NOTE: https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq
 CVE-2026-41898 (rust-openssl provides OpenSSL bindings for the Rust programming langua ...)
 	- rust-openssl <unfixed>
 	NOTE: https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-hppc-g8h3-xhp3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d23731b4d0e37b40a867cf89663dba351545d4da

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d23731b4d0e37b40a867cf89663dba351545d4da
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260424/9a8ea55c/attachment.htm>