[Pkg-javascript-devel] node-mermaid_9.2.2+~2.0.0-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 17 Jul 2026 22:02:24 +0200
Source: node-mermaid
Architecture: source
Version: 9.2.2+~2.0.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel at lists.alioth.debian.org>
Changed-By: Bastien Roucariès <rouca at debian.org>
Changes:
 node-mermaid (9.2.2+~2.0.0-1) unstable; urgency=medium
 .
   * New upstream version
   * Upload to unstable
   * Fix CVE-2022-31108:
     An attacker is able to inject arbitrary `CSS` into the generated
     graph allowing them to change the styling of elements outside
     of the generated graph, and potentially exfiltrate sensitive
     information by using specially crafted `CSS` selectors.
Checksums-Sha1:
 416c03fa622911a48d386ad3a41bbe6a24b1377a 3006 node-mermaid_9.2.2+~2.0.0-1.dsc
 35e3cf7da14f4c657976bba946f519243e5609d0 20025 node-mermaid_9.2.2+~2.0.0.orig-khroma.tar.gz
 728aa0444b87e7c4875e03598f6301d84f32a9e7 8317796 node-mermaid_9.2.2+~2.0.0.orig.tar.gz
 ade2fb92c996e84e9bf6d96e360b465c1d0182b3 13864 node-mermaid_9.2.2+~2.0.0-1.debian.tar.xz
 dc43daa679963f81187ab58849bd258b9cf9fac2 23594 node-mermaid_9.2.2+~2.0.0-1_source.buildinfo
Checksums-Sha256:
 7fe0e9c89acdaa4f6dff2392665723191a5dcd792bef3a53b59c01a650728e99 3006 node-mermaid_9.2.2+~2.0.0-1.dsc
 2c163ef0113b7753fd65d88f293bcb480eebc488673241d7fb6dade9ee6898ff 20025 node-mermaid_9.2.2+~2.0.0.orig-khroma.tar.gz
 2fd5d606c896c7ecddd0daa92da582cf13e53a21c07c5974888c149592b97bca 8317796 node-mermaid_9.2.2+~2.0.0.orig.tar.gz
 733e3cddd636dd62020613c33254433e3223dbe10e1c08dbce007f07168164da 13864 node-mermaid_9.2.2+~2.0.0-1.debian.tar.xz
 d124012b0c521706995249ce4e1b962e91ab463674e398c72b883dd4f755c201 23594 node-mermaid_9.2.2+~2.0.0-1_source.buildinfo
Files:
 1d61c29af5a94b0763465bae84b469fa 3006 javascript optional node-mermaid_9.2.2+~2.0.0-1.dsc
 7f7b12af4e0c5f7794553d62a48d5ed8 20025 javascript optional node-mermaid_9.2.2+~2.0.0.orig-khroma.tar.gz
 7575eda3cd75a831ecbb1fd9865b55f5 8317796 javascript optional node-mermaid_9.2.2+~2.0.0.orig.tar.gz
 ec853f4a6f1156e9bd4c7f7f1d2e83ab 13864 javascript optional node-mermaid_9.2.2+~2.0.0-1.debian.tar.xz
 797018850156a1556c47edcf25376ecc 23594 javascript optional node-mermaid_9.2.2+~2.0.0-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=dJyd
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20260717/96940aa7/attachment.sig>