golang-github-gorilla-csrf (1.6.2-2+deb11u1) bullseye-security; urgency=medium

  * Non-maintainer upload by the LTS Team.
  * SECURITY UPDATE:
    - CVE-2025-24358 / GHSA-rq77-p4h8-4crw:
      Fix CSRF via form submission from origins that share a top level
      domain with the target origin (Closes: #1103584).

 -- Andrej Shadura <andrewsh@debian.org>  Wed, 30 Apr 2025 15:07:40 +0200

golang-github-gorilla-csrf (1.6.2-2) unstable; urgency=medium

  * Source-only upload for migration into testing

 -- Anthony Fok <foka@debian.org>  Mon, 06 Jan 2020 03:34:55 -0700

golang-github-gorilla-csrf (1.6.2-1) unstable; urgency=medium

  * Initial release (Closes: #946016)

 -- Anthony Fok <foka@debian.org>  Mon, 02 Dec 2019 15:26:24 -0700