Control: reassign -1 node-dot-prop 4.1.1-1+deb10u1 Le mer. 13 mai 2020 à 13:45, Nikolay Shaplov <dh...@nataraj.su> a écrit :
> В письме от среда, 13 мая 2020 г. 12:40:25 MSK пользователь Christian > Motschke > написал: > > > I found your Bug report and had the same error. I fixed it for me. You > have > > to edit the file /usr/lib/nodejs/dot-prop/index.js and replace 3 > > occurrences of > > > > if (pathArray.length === 0) { > > > > with > > > > if (pathArr.length === 0) { > > Thanks! I hope it will be helpful to the packet maintainers. > The bug comes from that patch: https://salsa.debian.org/js-team/node-dot-prop/-/blob/buster/debian/patches/CVE-2020-8116.diff Reassigned to node-dot-prop. Jérémy