Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e455aa0a by Salvatore Bonaccorso at 2026-01-17T09:31:02+01:00
Add CVE-2026-23745/node-tar
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,9 @@
CVE-2026-23800 (Incorrect Privilege Assignment vulnerability in Modular DS
modular-con ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-23745 (node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2)
fails t ...)
- TODO: check
+ - node-tar <unfixed>
+ NOTE:
https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97
+ NOTE: Fixed by:
https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e
(v7.5.3)
CVE-2026-23744 (MCPJam inspector is the local-first development platform for
MCP serve ...)
TODO: check
CVE-2026-23742 (Skipper is an HTTP router and reverse proxy for service
composition. T ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e455aa0aafca0f174733bcb9869270af64df46f4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e455aa0aafca0f174733bcb9869270af64df46f4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
