[From nobody Sun Jun 21 11:27:05 2026 Received: (at submit) by bugs.debian.org; 6 Jun 2026 18:39:46 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-9.9 required=4.0 tests=BAYES_00, FOURLA, FROMDEVELOPER, NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 25; hammy, 146; neutral, 34; spammy, 1. spammytokens:0.941-+--H*r:bugs.debian.org hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking Return-path: <carnil@debian.org> Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1wVvvu-004EK8-1U for submit@bugs.debian.org; Sat, 06 Jun 2026 18:39:46 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: npm: CVE-2026-9496 Message-ID: <178077118415.1053016.4106450183621804686.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0 Date: Sat, 06 Jun 2026 20:39:44 +0200 Delivered-To: submit@bugs.debian.org U291cmNlOiBucG0KVmVyc2lvbjogMTEuMTYuMCtkczItMQpTZXZlcml0eTogaW1wb3J0YW50ClRh Z3M6IHNlY3VyaXR5IHVwc3RyZWFtClgtRGViYnVncy1DYzogY2FybmlsQGRlYmlhbi5vcmcsIERl YmlhbiBTZWN1cml0eSBUZWFtIDx0ZWFtQHNlY3VyaXR5LmRlYmlhbi5vcmc+CgpIaSwKClRoZSBm b2xsb3dpbmcgdnVsbmVyYWJpbGl0eSB3YXMgcHVibGlzaGVkIGZvciBucG0uCgpDVkUtMjAyNi05 NDk2WzBdOgp8IFZlcnNpb25zIG9mIHRoZSBwYWNrYWdlIHBhY290ZSBmcm9tIDExLjIuNyBhcmUg dnVsbmVyYWJsZSB0byBEZW5pYWwKfCBvZiBTZXJ2aWNlIChEb1MpIHZpYSB0aGUgYWRkR2l0U2hh IGZ1bmN0aW9uLiBBbiBhdHRhY2tlciBjYW4gZXhwbG9pdAp8IHRoaXMgdnVsbmVyYWJpbGl0eSBi eSBzdXBwbHlpbmcgYSBzcGVjaWFsbHkgY3JhZnRlZCBzcGVjLnJhd1NwZWMKfCB2YWx1ZSB0aGF0 IHRyaWdnZXJzIHRoZSBmdW5jdGlvbuKAmXMgcmVnZXggcmVwbGFjZW1lbnQgYW5kIHN0cmluZy0K fCBtYW5pcHVsYXRpb24gbG9naWMsICBjYXVzaW5nIGV4Y2Vzc2l2ZSBDUFUgY29uc3VtcHRpb24g YW5kCnwgcG90ZW50aWFsbHkgc3RhbGxpbmcgb3IgY3Jhc2hpbmcgdGhlIHByb2Nlc3MuCgpwYWNv dGUgaXMgZW1iZWRkZWQvcHJvdmlkZWQgdmlhIHNyYzpucG0uCgpJZiB5b3UgZml4IHRoZSB2dWxu ZXJhYmlsaXR5IHBsZWFzZSBhbHNvIG1ha2Ugc3VyZSB0byBpbmNsdWRlIHRoZQpDVkUgKENvbW1v biBWdWxuZXJhYmlsaXRpZXMgJiBFeHBvc3VyZXMpIGlkIGluIHlvdXIgY2hhbmdlbG9nIGVudHJ5 LgoKRm9yIGZ1cnRoZXIgaW5mb3JtYXRpb24gc2VlOgoKWzBdIGh0dHBzOi8vc2VjdXJpdHktdHJh Y2tlci5kZWJpYW4ub3JnL3RyYWNrZXIvQ1ZFLTIwMjYtOTQ5NgogICAgaHR0cHM6Ly93d3cuY3Zl Lm9yZy9DVkVSZWNvcmQ/aWQ9Q1ZFLTIwMjYtOTQ5NgpbMV0gaHR0cHM6Ly9zZWN1cml0eS5zbnlr LmlvL3Z1bG4vU05ZSy1KUy1QQUNPVEUtODIyNTA4NAoKUGxlYXNlIGFkanVzdCB0aGUgYWZmZWN0 ZWQgdmVyc2lvbnMgaW4gdGhlIEJUUyBhcyBuZWVkZWQuCgpSZWdhcmRzLApTYWx2YXRvcmUK ]