-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 17 Jul 2026 22:02:24 +0200 Source: node-mermaid Architecture: source Version: 9.2.2+~2.0.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Changes: node-mermaid (9.2.2+~2.0.0-1) unstable; urgency=medium . * New upstream version * Upload to unstable * Fix CVE-2022-31108: An attacker is able to inject arbitrary `CSS` into the generated graph allowing them to change the styling of elements outside of the generated graph, and potentially exfiltrate sensitive information by using specially crafted `CSS` selectors. Checksums-Sha1: 416c03fa622911a48d386ad3a41bbe6a24b1377a 3006 node-mermaid_9.2.2+~2.0.0-1.dsc 35e3cf7da14f4c657976bba946f519243e5609d0 20025 node-mermaid_9.2.2+~2.0.0.orig-khroma.tar.gz 728aa0444b87e7c4875e03598f6301d84f32a9e7 8317796 node-mermaid_9.2.2+~2.0.0.orig.tar.gz ade2fb92c996e84e9bf6d96e360b465c1d0182b3 13864 node-mermaid_9.2.2+~2.0.0-1.debian.tar.xz dc43daa679963f81187ab58849bd258b9cf9fac2 23594 node-mermaid_9.2.2+~2.0.0-1_source.buildinfo Checksums-Sha256: 7fe0e9c89acdaa4f6dff2392665723191a5dcd792bef3a53b59c01a650728e99 3006 node-mermaid_9.2.2+~2.0.0-1.dsc 2c163ef0113b7753fd65d88f293bcb480eebc488673241d7fb6dade9ee6898ff 20025 node-mermaid_9.2.2+~2.0.0.orig-khroma.tar.gz 2fd5d606c896c7ecddd0daa92da582cf13e53a21c07c5974888c149592b97bca 8317796 node-mermaid_9.2.2+~2.0.0.orig.tar.gz 733e3cddd636dd62020613c33254433e3223dbe10e1c08dbce007f07168164da 13864 node-mermaid_9.2.2+~2.0.0-1.debian.tar.xz d124012b0c521706995249ce4e1b962e91ab463674e398c72b883dd4f755c201 23594 node-mermaid_9.2.2+~2.0.0-1_source.buildinfo Files: 1d61c29af5a94b0763465bae84b469fa 3006 javascript optional node-mermaid_9.2.2+~2.0.0-1.dsc 7f7b12af4e0c5f7794553d62a48d5ed8 20025 javascript optional node-mermaid_9.2.2+~2.0.0.orig-khroma.tar.gz 7575eda3cd75a831ecbb1fd9865b55f5 8317796 javascript optional node-mermaid_9.2.2+~2.0.0.orig.tar.gz ec853f4a6f1156e9bd4c7f7f1d2e83ab 13864 javascript optional node-mermaid_9.2.2+~2.0.0-1.debian.tar.xz 797018850156a1556c47edcf25376ecc 23594 javascript optional node-mermaid_9.2.2+~2.0.0-1_source.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJqWoqLCRAAOhotqkEIX0cUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmcHD2wXz/ir7ujK2TubIIqLidiLgIqbulRYzH1pUtRm URYhBF0Bh7lAokW617D1agA6Gi2qQQhfAABzBw/8DQeO1ih0Qb9rszfL+KNoh552 yAZvlItVHcanj5E8u+iQ0M8KGWJILDRaYn/s+Smon2tVeZyOAC3K56iXurrG+p1F 6eFiLIu9sHAyKKXOJQlDhJ3VmzzOSOKiWyhfTbr4JlKzBfc9AEgB3RbJNHIsiwj4 fsktLgm8eqUjIgutKWiXt+Z2yOSTO3cb03y1kYJ6+uWI6R6p+pwy0H0R1d/uWX0C 6bhvCRhlsmaWoXRCXuVxSVLCA2lXdHtqp776vSUwg5uRHhBE+McXKJO1exBMAoim pBAxEz7HFsulatXLi4xbwUQDHNco0K54e5RgUX3jnNNaa5qy03lVY3dznBizPufk lPztm71oiul/xs+dr/pdRgHn7Z0Drx/lN5xfCXsA8ZTFUL8TPVMNWpShD7Nkc+kX 7lr4AByrEX9RvFewEvYujCkl3I7DZ4pgy3R1Y5HJVt4LTKDDwMcsnGqVws3thLsb /9HarM//OpehEm656a+/63/aULdYAw7vn/FSlJarUDFcpIMXowXhQsLmcGGxaAPx Si70PQ2qC1Bh+sdz/0kj42Coq0i3cJrGv6FePygUB3KArTiisWkTIVYc72dBfFPs 719WEh2yknv8BMS+2yUKaon24fJ/0RgkHw5vyEAJnIWJWykjU2NMWjj1vayIC6nh Bl+J4S/wRaF1oe2E7jc= =dJyd -----END PGP SIGNATURE-----