From 6915f38d3eae9e0b7bddd5afab307dc3149f446e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Moritz=20M=C3=BChlenhoff?= Date: Fri, 29 Apr 2022 15:49:40 +0200 Subject: grunt spu --- data/CVE/list | 2 ++ data/next-point-update.txt | 2 ++ 2 files changed, 4 insertions(+) (limited to 'data') diff --git a/data/CVE/list b/data/CVE/list index 20065752d5..53eb42d939 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -15918,6 +15918,8 @@ CVE-2022-0437 (Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14. .. CVE-2022-0436 (Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2. ...) [experimental] - grunt 1.5.2-1 - grunt 1.5.2-2 (bug #1009676) + [bullseye] - grunt (Minor issue) + [buster] - grunt (Minor issue) NOTE: https://github.com/gruntjs/grunt/commit/aad3d4521c3098fb255fb2db8f2e1d691a033665 (v1.5.0) NOTE: https://github.com/gruntjs/grunt/pull/1740 NOTE: https://huntr.dev/bounties/f55315e9-9f6d-4dbb-8c40-bae50c1ae92b diff --git a/data/next-point-update.txt b/data/next-point-update.txt index 5c444093b5..fc44caf7d9 100644 --- a/data/next-point-update.txt +++ b/data/next-point-update.txt @@ -46,3 +46,5 @@ CVE-2021-43566 [bullseye] - samba 2:4.13.13+dfsg-1~deb11u4 CVE-2022-1328 [bullseye] - mutt 2.0.5-4.1+deb11u1 +CVE-2022-0436 + [bullseye] - grunt 1.3.0-1+deb11u1 -- cgit v1.2.3