node-express 2.5.9-2 is marked for autoremoval from testing on 2014-05-27 It (build-)depends on packages with these RC bugs: 744374: node-connect: methodOverride middleware reflected cross-site scripting (CVE-2013-7370 CVE-2013-7371)