Bug#987048: buster-pu: package node-glob-parent/3.1.0-1+deb10u1

To: Yadd <yadd@debian.org>, 987048@bugs.debian.org
Subject: Bug#987048: buster-pu: package node-glob-parent/3.1.0-1+deb10u1
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Mon, 19 Apr 2021 20:03:21 +0100
Message-id: <[🔎] e6ea36a06d2900dd8196c7551ffd65f4b22b553a.camel@adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 987048@bugs.debian.org
In-reply-to: <[🔎] 161857384274.3511610.8671561208936188981.reportbug@deb007.xnr.fr>
References: <[🔎] 161857384274.3511610.8671561208936188981.reportbug@deb007.xnr.fr> <[🔎] 161857384274.3511610.8671561208936188981.reportbug@deb007.xnr.fr>

Control: tags -1 + confirmed

On Fri, 2021-04-16 at 13:50 +0200, Yadd wrote:
> node-glob-parent is vulnerable to Regex Denial of Service (ReDoS)
> CVE-2020-28469
> 

Please go ahead.

Regards,

Adam

Reply to:

References:
- Bug#987048: buster-pu: package node-glob-parent/3.1.0-1+deb10u1
  - From: Yadd <yadd@debian.org>

Prev by Date: Bug#987042: buster-pu: package node-handlebars/4.1.0-1+deb10u3
Next by Date: Processed: Re: Bug#987048: buster-pu: package node-glob-parent/3.1.0-1+deb10u1
Previous by thread: Bug#987048: buster-pu: package node-glob-parent/3.1.0-1+deb10u1
Next by thread: Processed: Re: Bug#987048: buster-pu: package node-glob-parent/3.1.0-1+deb10u1
Index(es):
- Date
- Thread