Bug#1028992: bullseye-pu: package node-json5/2.1.3-2+deb11u1

To: Yadd <yadd@debian.org>, 1028992@bugs.debian.org
Subject: Bug#1028992: bullseye-pu: package node-json5/2.1.3-2+deb11u1
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Sun, 19 Feb 2023 20:03:55 +0000
Message-id: <[🔎] e7812a5f83af8c85c77c73b5a178b25e66481b5a.camel@adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 1028992@bugs.debian.org
In-reply-to: <167384031498.2376745.10987880484956893739.reportbug@debian007.xnr.fr>
References: <167384031498.2376745.10987880484956893739.reportbug@debian007.xnr.fr> <167384031498.2376745.10987880484956893739.reportbug@debian007.xnr.fr>

Control: tags -1 + confirmed

On Mon, 2023-01-16 at 07:38 +0400, Yadd wrote:
> node-json5 is vulnerable to prototype pollution (CVE-2022-46175)
> 

Please go ahead.

Regards,

Adam

Reply to:

Prev by Date: Bug#1031652: bullseye-pu: package c-ares/1.17.1-1+deb11u1 CVE-2022-4904
Next by Date: Processed: Re: Bug#1028992: bullseye-pu: package node-json5/2.1.3-2+deb11u1
Previous by thread: Processed: bullseye-pu: package c-ares/1.17.1-1+deb11u1 CVE-2022-4904
Next by thread: Processed: Re: Bug#1028992: bullseye-pu: package node-json5/2.1.3-2+deb11u1
Index(es):
- Date
- Thread