Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
43fbc3ce by Salvatore Bonaccorso at 2026-01-18T08:13:33+01:00
Track fixed version for CVE-2026-23745/node-tar via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -29,7 +29,7 @@ CVE-2025-10484 (The Registration & Login with Mobile Phone
Number for WooCommerc
CVE-2026-23800 (Incorrect Privilege Assignment vulnerability in Modular DS
modular-con ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-23745 (node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2)
fails t ...)
- - node-tar <unfixed>
+ - node-tar 6.2.1+ds1+~cs6.1.13-6
NOTE:
https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97
NOTE: Fixed by:
https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e
(v7.5.3)
CVE-2026-23744 (MCPJam inspector is the local-first development platform for
MCP serve ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43fbc3ce4dc4e6d2871bd9de899c478d56ab5ad3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43fbc3ce4dc4e6d2871bd9de899c478d56ab5ad3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
