Skip to content

fix(plantuml): CVE-2026-0858#3

Merged
Zeno-sole merged 1 commit intomasterfrom
fix/CVE-2026-0858
Apr 30, 2026
Merged

fix(plantuml): CVE-2026-0858#3
Zeno-sole merged 1 commit intomasterfrom
fix/CVE-2026-0858

Conversation

@deepin-ci-robot
Copy link
Copy Markdown
Contributor

Security Update

CVE-2026-0858

Fix stored XSS in SVG export for GraphViz diagrams.

Disable SVG export for PSystemDot to prevent malicious JavaScript
injection in generated SVG output.


Generated by AI

Fix stored XSS in SVG export for GraphViz diagrams.

Disable SVG export for PSystemDot to prevent malicious JavaScript
injection in generated SVG output.

Upstream: plantuml/plantuml@6826315

Generated-By: glm-5.1

Co-Authored-By: hudeng <hudeng@deepin.org>
@github-actions
Copy link
Copy Markdown

TAG Bot

TAG: 1%1.2020.2+ds-3deepin1
EXISTED: no
DISTRIBUTION: unstable

@deepin-ci-robot
Copy link
Copy Markdown
Contributor Author

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign zccrs for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@hudeng-go
Copy link
Copy Markdown
Contributor

/integrate

@github-actions
Copy link
Copy Markdown

AutoIntegrationPr Bot
auto integrate with pr url: deepin-community/Repository-Integration#3911
PrNumber: 3911
PrBranch: auto-integration-25144465519

@Zeno-sole Zeno-sole merged commit 4ec3a24 into master Apr 30, 2026
6 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants