| Release | Version |
|---|---|
| buster | 1.6.0-1 |
| Bug | buster | Description |
|---|---|---|
| CVE-2021-31597 | vulnerable (no DSA, ignored) | The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL c ... |
| CVE-2020-28502 | vulnerable (no DSA, ignored) | This affects the package xmlhttprequest before 1.7.0; all versions of ... |