HI Xavier, On Fri, Apr 24, 2026 at 02:15:02PM +0200, Xavier wrote: > Hi, > > sid has version 3.5.4 which contain the patch given in CVE-2025-46653, > therefore it is fixed. > The bug is closed by=ut the tracker didn't update its information.
A question back on this as well: https://bugs.debian.org/1104246#25 closed it as well for node-form-data. Why? (This did confuse initially our tracking, but the issue is in formidable, so I have now updated the tracking). Regards, Salvatore
