[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-62389/node-ws via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bbac2ac7 by Salvatore Bonaccorso at 2026-07-17T22:02:54+02:00
Track fixed version for CVE-2026-62389/node-ws via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1139,7 +1139,7 @@ CVE-2026-62685 (File Browser is a file managing interface for uploading, deletin
 CVE-2026-62683 (File Browser is a file managing interface for uploading, deleting, pre ...)
 	NOT-FOR-US: File Browser
 CVE-2026-62389 (ws before 8.21.1 contains a memory exhaustion vulnerability in lib/rec ...)
-	- node-ws <unfixed> (bug #1142271)
+	- node-ws 8.21.1+~cs14.19.1-1 (bug #1142271)
 	NOTE: https://github.com/websockets/ws/issues/2331
 	NOTE: Fixed by: https://github.com/websockets/ws/commit/f197ac65140920bdcecdab74bfc69c2d7858e55d (8.21.1)
 CVE-2026-62378 (RustFS Console is a web management console for the RustFS distributed  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bbac2ac71d60f040eebe53df4d95f7ac0a7c0f5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bbac2ac71d60f040eebe53df4d95f7ac0a7c0f5c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260717/944589ec/attachment-0001.htm>