harbor.ist

Two new CVEs published today (as well as the fixed releases for them): `shell-quote`: www.cve.org/CVERecord?id... `pbkdf2`: www.cve.org/CVERecord?id...

Harborist has published a new CVE: www.cve.org/cverecord?id... This is on all versions of the npmjs.com/form-data package, on all node versions. Please note: node 18+ and all modern browsers (caniuse.com?search=formd...) have FormData built in - please consider migrating to it!

Harborist has just published its first two CVEs: www.cve.org/CVERecord?id... www.cve.org/CVERecord?id... Both are on npmjs.com/pbkdf2, please update to v3.1.3!

Harborist is now a CVE Numbering Authority (CNA) assigning CVE IDs for all projects listed under www.npmjs.com/~ljharb cve.org/Media/News/i... #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity