[Git][security-tracker-team/security-tracker][master] new node-axios issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f9b3a0ff by Moritz Muehlenhoff at 2026-10-14T10:50:31+02:00
new node-axios issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4657,7 +4657,12 @@ CVE-2026-102073 (A vulnerability has been identified in APOGEE MBC (PPC) (BACnet
 CVE-2026-102007 (The Bit integrations \u2013 Form Integration, Webhook, Spreadsheets, C ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-101899 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
-	TODO: check
+	- node-axios <unfixed>
+	[trixie] - node-axios <not-affected> (Vulnerable code not present, introduced in 1.15)
+	[bookworm] - node-axios <not-affected> (Vulnerable code not present, introduced in 1.15)
+	NOTE: https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx
+	NOTE: https://github.com/axios/axios/pull/11141
+	NOTE: https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a (v1.20.0)
 CVE-2026-101020 (An incorrect permission assignment for critical resource issue exists  ...)
 	TODO: check
 CVE-2026-100133 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vuln ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9b3a0ff2394d0b06f5c268154dfe29a3b5c24b1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9b3a0ff2394d0b06f5c268154dfe29a3b5c24b1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/4062d960/attachment.htm>