Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: c57dbc72 by Salvatore Bonaccorso at 2025-01-22T06:00:20+01:00 Add initial tracking for new nodejs issues - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,12 @@ +CVE-2025-23085 [GOAWAY HTTP/2 frames cause memory leak outside heap] + - nodejs <unfixed> + NOTE: https://nodejs.org/en/blog/vulnerability/january-2025-security-releases#goaway-http2-frames-cause-memory-leak-outside-heap-cve-2025-23085---medium +CVE-2025-23084 [Path traversal by drive name in Windows environment] + - nodejs <not-affected> (Only affect Node.js on Windows) + NOTE: https://nodejs.org/en/blog/vulnerability/january-2025-security-releases#path-traversal-by-drive-name-in-windows-environment-cve-2025-23084---medium +CVE-2025-23083 [Worker permission bypass via InternalWorker leak in diagnostics] + - nodejs <unfixed> + NOTE: https://nodejs.org/en/blog/vulnerability/january-2025-security-releases#worker-permission-bypass-via-internalworker-leak-in-diagnostics-cve-2025-23083---high CVE-2025-23195 NOT-FOR-US: Apache Ambari CVE-2025-23196 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c57dbc72706a8b582d1427acfb9881dffe8eecef -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c57dbc72706a8b582d1427acfb9881dffe8eecef You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
