package release.debian.org tags 1146066 = trixie pending thanks Hi,
The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian trixie. Thanks for your contribution! Upload details ============== Package: composer Version: 2.8.8-1+deb13u4 Explanation: validate resolved packages before locking [CVE-2026-59948]; validate paths against path traversal [CVE-2026-59944 CVE-2026-59946]; relax token validation on input; sanitize URL-embedded usernames/tokens in verbose output [CVE-2026-59947]; fix command injection via malicious Perforce url [CVE-2026-84361]
