[Git][security-tracker-team/security-tracker][master] Track fixed version for node-proxy-addr via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Sep 16 06:15:26 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9ae4fddb by Salvatore Bonaccorso at 2026-09-16T07:14:53+02:00
Track fixed version for node-proxy-addr via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1419,7 +1419,7 @@ CVE-2026-90813 (A vulnerability was detected in cosmicstack-labs mercury-agent u
 CVE-2026-90812 (A security vulnerability has been detected in cosmicstack-labs mercury ...)
 	NOT-FOR-US: mercury-agent
 CVE-2026-90711 (proxy-addr is a Node.js module that determines a request's client addr ...)
-	- node-proxy-addr <unfixed>
+	- node-proxy-addr 2.0.8+~cs2.3.7-1
 	NOTE: https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h
 CVE-2026-89141 (The AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress plu ...)
 	NOT-FOR-US: WordPress plugin



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ae4fddb3696d337650477ff7cc98e86478a1732

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ae4fddb3696d337650477ff7cc98e86478a1732
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260916/797f7219/attachment.htm>


More information about the debian-security-tracker-commits mailing list