#1151210 ITP: node-side-channel -- Store information about any JS value in a side channel

Package:
wnpp
Source:
wnpp
Submitter:
Xavier Guimard
Date:
2026-10-18 09:27:02 UTC
Severity:
normal
Tags:
#1151210#5
Date:
2026-10-18 09:12:29 UTC
From:
To:
* Package name    : node-side-channel
  Version         : 1.1.1
  Upstream Contact: Jordan Harband <ljharb@gmail.com>
* URL             : https://github.com/ljharb/side-channel
* License         : Expat
  Programming Lang: JavaScript
  Description     : Store information about any JS value in a side channel

node-side-channel wa already embedded in node-deep-equal because it was
a little library. Version 1.1.1 grows and require to be packaged
independently. This version is needed to update node-qs and fix
CVE-2026-110816.

It will be maintained under JS Team umbrella
#1151210#8
Date:
2026-10-18 09:24:35 UTC
From:
To:
Hello,

Bug #1151210 in node-side-channel reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/js-team/node-side-channel/-/commit/3f9aab3378b717400dfde44884dea262d0cdc1e3
------------------------------------------------------------------------
Import Debian changes 1.1.1+~cs3.0.4-1

node-side-channel (1.1.1+~cs3.0.4-1) UNRELEASED; urgency=medium
.
  * Initial release (Closes: #1151210)
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1151210