[Git][security-tracker-team/security-tracker][master] Add CVE-2026-85063/node-csv-parse

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c9e2d151 by Salvatore Bonaccorso at 2026-09-04T09:55:35+02:00
Add CVE-2026-85063/node-csv-parse

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -155,7 +155,11 @@ CVE-2026-85094 (The Canva Android App  before 2.376.0 did not restrict the heade
 CVE-2026-85085 (The Canva Android App before 2.376.0 allowed an external origin to be  ...)
 	NOT-FOR-US: Canva Android App
 CVE-2026-85063 (node-csv is a full-featured CSV parser with a simple API that is teste ...)
-	TODO: check
+	- node-csv-parse <unfixed>
+	NOTE: https://github.com/adaltas/node-csv/security/advisories/GHSA-8cw4-87c7-c6xx
+	NOTE: https://github.com/adaltas/node-csv/issues/496
+	NOTE: https://github.com/adaltas/node-csv/pull/497
+	NOTE: Fixed by: https://github.com/adaltas/node-csv/commit/eb4d1484589c976dcb977db8dd0b90e015a6f66e
 CVE-2026-85062 (Colord is a tiny yet powerful tool for high-performance color manipula ...)
 	TODO: check
 CVE-2026-85061 (MapLibre GL JS is an interactive vector tile map library for web brows ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c9e2d151367e8bfb514c48606dc211c0c71d1a96

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c9e2d151367e8bfb514c48606dc211c0c71d1a96
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260904/5cb3ea67/attachment.htm>