[Git][security-tracker-team/security-tracker][master] Add two new node-re2 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
db31447b by Salvatore Bonaccorso at 2026-07-31T09:51:43+02:00
Add two new node-re2 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17,11 +17,15 @@ CVE-2026-68501 (Sylius Mollie Plugin provides Mollie payment integration for Syl
 CVE-2026-68500 (Sylius Mollie Plugin provides Mollie payment integration for Sylius ap ...)
 	NOT-FOR-US: Sylius Mollie Plugin
 CVE-2026-68499 (re2 provides Node.js bindings for Google's RE2 regular expression engi ...)
-	TODO: check
+	- node-re2 <unfixed>
+	NOTE: https://github.com/uhop/node-re2/security/advisories/GHSA-6hxr-mr5r-9836
+	NOTE: Fixed by: https://github.com/uhop/node-re2/commit/56293de4fc0914d7bc35f92e98de25b0d9bb417d (1.25.2)
 CVE-2026-67594 (Spikster through commit e1cdf8c contains a missing authentication vuln ...)
 	NOT-FOR-US: Spikster
 CVE-2026-67550 (re2 provides Node.js bindings for Google's RE2 regular expression engi ...)
-	TODO: check
+	- node-re2 <unfixed>
+	NOTE: https://github.com/uhop/node-re2/security/advisories/GHSA-ff84-5f28-78qj
+	NOTE: Fixed by: https://github.com/uhop/node-re2/commit/56293de4fc0914d7bc35f92e98de25b0d9bb417d (1.25.2)
 CVE-2026-67530 (WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earli ...)
 	NOT-FOR-US: WACRM
 CVE-2026-67529 (OpenProject is open-source, web-based project management software. Pri ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/db31447b07eb2228353220db3ec7905bdba56a2d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/db31447b07eb2228353220db3ec7905bdba56a2d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260731/18e68b76/attachment.htm>