#1149046 trixie-pu: package node-min-document/2.19.0+~cs2.20.2-2+deb13u1

#1149046#5
Date:
2026-09-26 11:04:58 UTC
From:
To:
[ Reason ]
node-min-document is vulnerable to a prototype pollution
(CVE-2025-57352 #1116340).

[ Impact ]
Security issue

[ Tests ]
Test pass (patch is exactly the "unstable" change.

[ Risks ]
No risk, patch is trivial

[ Checklist ]
  [X] *all* changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in (old)stable
  [X] the issue is verified as fixed in unstable

[ Changes ]
Use Object.prototype.hasOwnProperty to avoid prototype pollution

Cheers,
Xavier