[Bug 1224310] VUL-0: CVE-2024-4068: xpra-html5: the npm package `braces` fails to limit the number of characters it can handle, which could lead to Memory Exhaustion

https://bugzilla.suse.com/show_bug.cgi?id=1224310 https://bugzilla.suse.com/show_bug.cgi?id=1224310#c4 Gabriele Sonnu <gabriele.sonnu@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |INVALID Assignee|scott.bradnick@suse.com |security-team@suse.de --- Comment #4 from Gabriele Sonnu <gabriele.sonnu@suse.com> --- Not shipped with xpra-html5 but only used as commit hook: https://github.com/Xpra-org/xpra-html5/issues/306#issuecomment-2116518229 Nothing to do, closing. -- You are receiving this mail because: You are on the CC list for the bug.