Bug#985943: buster-pu: package node-hosted-git-info/2.7.1-1+deb10u1

To: Yadd <yadd@debian.org>, 985943@bugs.debian.org
Subject: Bug#985943: buster-pu: package node-hosted-git-info/2.7.1-1+deb10u1
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Mon, 19 Apr 2021 19:47:45 +0100
Message-id: <[🔎] 06594df104807d0867c7ad49a216c0349d6e5cff.camel@adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 985943@bugs.debian.org
In-reply-to: <161676865514.633394.17821433683832870148.reportbug@deb007.xnr.fr>
References: <161676865514.633394.17821433683832870148.reportbug@deb007.xnr.fr> <161676865514.633394.17821433683832870148.reportbug@deb007.xnr.fr>

Control: tags -1 + confirmed

On Fri, 2021-03-26 at 15:24 +0100, Yadd wrote:
> node-hosted-git-info is vulnerable to RegExp Denial of Service
> 

Please go ahead.

Regards,

Adam

Reply to:

Prev by Date: Processed: Re: Bug#985943: buster-pu: package node-hosted-git-info/2.7.1-1+deb10u1
Next by Date: Bug#986224: buster-pu: package plinth/19.1+deb10u1
Previous by thread: Bug#986112: buster-pu: package freediameter/1.2.1-7
Next by thread: Processed: Re: Bug#985943: buster-pu: package node-hosted-git-info/2.7.1-1+deb10u1
Index(es):
- Date
- Thread