Control: tags -1 + confirmed On Tue, 2022-05-03 at 20:18 +0200, Roland Gruber wrote: > Package: release.debian.org > Severity: important > p-u requests are always "normal" severity. (Fixed earlier.) [...] > Stored XSS and arbitrary image read vulnerability. > See > https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-f2fr-cccr-583v > Please go ahead. Regards, Adam