data/CVE/list

@@ -36160,15 +36160,16 @@ CVE-2017-16119 (Fresh is a module used by the Express.js framework for HTTP resp
 CVE-2017-16118 (The forwarded module is used by the Express.js framework to handle the ...)
 	TODO: check
 CVE-2017-16117 (slug is a module to slugify strings, even if they contain unicode. ...)
-	TODO: check
+	NOT-FOR-US: slug node module
 CVE-2017-16116 (The string module is a module that provides extra string operations. ...)
-	TODO: check
+	NOT-FOR-US: string node module
 CVE-2017-16115 (The timespan module is vulnerable to regular expression denial of ...)
-	TODO: check
+	NOT-FOR-US: timespane node module
 CVE-2017-16114 (The marked module is vulnerable to a regular expression denial of ...)
-	TODO: check
+	- node-marked 0.3.9+dfsg-1 (unimportant)
+	NOTE: https://nodesecurity.io/advisories/531
 CVE-2017-16113 (The parsejson module is vulnerable to regular expression denial of ...)
-	TODO: check
+	NOT-FOR-US: parsejson node module
 CVE-2017-16112
 	RESERVED
 CVE-2017-16111 (The content module is a module to parse HTTP Content-* headers. It is ...)