Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c8f76fde by Moritz Muehlenhoff at 2025-09-09T09:26:32+02:00
"new" node-sanitize-html issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -79,9 +79,15 @@ CVE-2024-48341 (dingfanzu CMS V1.0 was discovered to contain
a Cross-Site Reques
CVE-2022-50238 (The on-endpoint Microsoft vulnerable driver blocklist is not
fully syn ...)
NOT-FOR-US: Microsoft
CVE-2019-25225 (`sanitize-html` prior to version 2.0.0-beta is vulnerable to
Cross-sit ...)
- TODO: check
+ - node-sanitize-html <not-affected> (Fixed before initial upload to the
archive)
+ NOTE: https://github.com/apostrophecms/sanitize-html/issues/293
+ NOTE: https://github.com/apostrophecms/sanitize-html/pull/156
+ NOTE:
https://github.com/apostrophecms/sanitize-html/commit/712cb6895825c8bb6ede71a16b42bade42abcaf3
(2.0.0)
CVE-2014-125128 ('sanitize-html' prior to version 1.0.3 is vulnerable to
Cross-site Scr ...)
- TODO: check
+ - node-sanitize-html <not-affected> (Fixed before initial upload to the
archive)
+ NOTE: https://github.com/apostrophecms/sanitize-html/issues/1
+ NOTE:
https://github.com/apostrophecms/sanitize-html/commit/889d4ec968e175f1905b2eb9d33f1fa89217cb02
(1.10.1)
+ NOTE:
https://github.com/apostrophecms/sanitize-html/commit/423b90e06e1e85245eccedaabeb3a82840c6cd86
(1.10.1)
CVE-2025-40930 (JSON::SIMD before version 1.07 and earlier for Perl has an
integer buf ...)
NOT-FOR-US: JSON::SIMD Perl module
CVE-2025-40929 (Cpanel::JSON::XS before version 4.40 for Perl has an integer
buffer ov ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8f76fde949ea95bd389a91ea2dde71db696596c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8f76fde949ea95bd389a91ea2dde71db696596c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
