Bug#1040677: bullseye-pu: package node-tough-cookie/4.0.0-2+deb11u1

To: Yadd <yadd@debian.org>, 1040677@bugs.debian.org
Subject: Bug#1040677: bullseye-pu: package node-tough-cookie/4.0.0-2+deb11u1
From: Jonathan Wiltshire <jmw@debian.org>
Date: Mon, 24 Jul 2023 21:24:41 +0100
Message-id: <[🔎] ZL7eCUizUNydWrf6@powdarrmonkey.net>
Reply-to: Jonathan Wiltshire <jmw@debian.org>, 1040677@bugs.debian.org
In-reply-to: <[🔎] 168887727976.1598186.11771099371940985956.reportbug@debian117>
References: <[🔎] 168887727976.1598186.11771099371940985956.reportbug@debian117> <[🔎] 168887727976.1598186.11771099371940985956.reportbug@debian117>

Control: tag -1 confirmed

On Sun, Jul 09, 2023 at 08:34:39AM +0400, Yadd wrote:
> [ Reason ]
> node-tough-cookie is vulnerable to prototype pollution

Please go ahead.

Thanks,


-- 
Jonathan Wiltshire                                      jmw@debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1

Reply to:

References:
- Bug#1040677: bullseye-pu: package node-tough-cookie/4.0.0-2+deb11u1
  - From: Yadd <yadd@debian.org>

Prev by Date: Processed: Re: Bug#1040677: bullseye-pu: package node-tough-cookie/4.0.0-2+deb11u1
Next by Date: Bug#1040679: bullseye-pu: package node-dottie/2.0.2-4+deb11u1
Previous by thread: Processed: Re: Bug#1040677: bullseye-pu: package node-tough-cookie/4.0.0-2+deb11u1
Next by thread: Bug#1040677: node-tough-cookie 4.0.0-2+deb11u1 flagged for acceptance
Index(es):
- Date
- Thread