[Git][security-tracker-team/security-tracker][master] new node-traverse issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f8f2228f by Moritz Muehlenhoff at 2026-10-08T12:43:09+02:00
new node-traverse issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -241,7 +241,10 @@ CVE-2026-107355
 CVE-2026-107354
 	REJECTED
 CVE-2026-107353 (traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5. ...)
-	TODO: check
+	- node-traverse <unfixed>
+	NOTE: https://github.com/ljharb/js-traverse/security/advisories/GHSA-rj28-8w7x-jmqc
+	NOTE: https://github.com/ljharb/js-traverse/commit/81ccab43e379cf42eb2a5f689630f7f79b3d71b8 (v0.6.12)
+	NOTE: https://github.com/ljharb/js-traverse/commit/37a9ebd103d2a259c824c29cdcc3f0dfe1acffce (v0.6.12)
 CVE-2026-107352 (Missing authorization checks in Amazon Athena engine version 3 request ...)
 	NOT-FOR-US: Amazon
 CVE-2026-107315 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pa ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8f2228fbd71b7a8b5a604d1a9476481c1caea32

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8f2228fbd71b7a8b5a604d1a9476481c1caea32
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/c006f47e/attachment.htm>