Le 28/04/2026 à 07:51, Salvatore Bonaccorso a écrit :
HI Xavier,
On Fri, Apr 24, 2026 at 02:15:02PM +0200, Xavier wrote:
Hi,
sid has version 3.5.4 which contain the patch given in CVE-2025-46653,
therefore it is fixed.
The bug is closed by=ut the tracker didn't update its information.
A question back on this as well:
https://bugs.debian.org/1104246#25
closed it as well for node-form-data. Why? (This did confuse initially
our tracking, but the issue is in formidable, so I have now updated
the tracking).
Regards,
Salvatore
Hi,
I don't remember, maybe an error on my side.
Sorry,
Xavier
