Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/trafficserver@8.0.2%2Bds-1?distro=sid
Typedeb
Namespacedebian
Nametrafficserver
Version8.0.2+ds-1
Qualifiers
distro sid
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version8.0.5+ds-1
Latest_non_vulnerable_version9.2.5+ds-0+deb12u4
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-au6q-ek7r-8bgr
vulnerability_id VCID-au6q-ek7r-8bgr
summary sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 to 8.0.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-11783
reference_id
reference_type
scores
0
value 0.01124
scoring_system epss
scoring_elements 0.78297
published_at 2026-04-21T12:55:00Z
1
value 0.01124
scoring_system epss
scoring_elements 0.78301
published_at 2026-04-18T12:55:00Z
2
value 0.01124
scoring_system epss
scoring_elements 0.78216
published_at 2026-04-01T12:55:00Z
3
value 0.01124
scoring_system epss
scoring_elements 0.78224
published_at 2026-04-02T12:55:00Z
4
value 0.01124
scoring_system epss
scoring_elements 0.78256
published_at 2026-04-04T12:55:00Z
5
value 0.01124
scoring_system epss
scoring_elements 0.78237
published_at 2026-04-07T12:55:00Z
6
value 0.01124
scoring_system epss
scoring_elements 0.78264
published_at 2026-04-08T12:55:00Z
7
value 0.01124
scoring_system epss
scoring_elements 0.7827
published_at 2026-04-09T12:55:00Z
8
value 0.01124
scoring_system epss
scoring_elements 0.78295
published_at 2026-04-11T12:55:00Z
9
value 0.01124
scoring_system epss
scoring_elements 0.78278
published_at 2026-04-12T12:55:00Z
10
value 0.01124
scoring_system epss
scoring_elements 0.78273
published_at 2026-04-13T12:55:00Z
11
value 0.01124
scoring_system epss
scoring_elements 0.78304
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-11783
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11783
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11783
2
reference_url https://lists.apache.org/thread.html/4f102f943935476732fb1fb653d687c7b69d29d9792f0d6cf72c505e%40%3Cannounce.trafficserver.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/4f102f943935476732fb1fb653d687c7b69d29d9792f0d6cf72c505e%40%3Cannounce.trafficserver.apache.org%3E
3
reference_url http://www.securityfocus.com/bid/107032
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/107032
4
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-11783
reference_id CVE-2018-11783
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2018-11783
fixed_packages
0
url pkg:deb/debian/trafficserver@8.0.2%2Bds-1?distro=sid
purl pkg:deb/debian/trafficserver@8.0.2%2Bds-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@8.0.2%252Bds-1%3Fdistro=sid
1
url pkg:deb/debian/trafficserver@8.1.10%2Bds-1~deb11u1?distro=sid
purl pkg:deb/debian/trafficserver@8.1.10%2Bds-1~deb11u1?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4738-xk8n-hbac
1
vulnerability VCID-4hs3-be7k-9qe7
2
vulnerability VCID-4uhe-mtbx-nfdu
3
vulnerability VCID-5e1r-3jec-tkhp
4
vulnerability VCID-c62p-6ghw-j3dv
5
vulnerability VCID-eay7-63um-43e9
6
vulnerability VCID-kjah-am9e-xkev
7
vulnerability VCID-tevw-8dcp-yfh6
8
vulnerability VCID-ww3t-p3pq-gkhy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@8.1.10%252Bds-1~deb11u1%3Fdistro=sid
2
url pkg:deb/debian/trafficserver@9.2.5%2Bds-0%2Bdeb12u3?distro=sid
purl pkg:deb/debian/trafficserver@9.2.5%2Bds-0%2Bdeb12u3?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.5%252Bds-0%252Bdeb12u3%3Fdistro=sid
3
url pkg:deb/debian/trafficserver@9.2.5%2Bds-1?distro=sid
purl pkg:deb/debian/trafficserver@9.2.5%2Bds-1?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4738-xk8n-hbac
1
vulnerability VCID-4hs3-be7k-9qe7
2
vulnerability VCID-4uhe-mtbx-nfdu
3
vulnerability VCID-5e1r-3jec-tkhp
4
vulnerability VCID-c62p-6ghw-j3dv
5
vulnerability VCID-eay7-63um-43e9
6
vulnerability VCID-jabw-thzt-63bb
7
vulnerability VCID-kjah-am9e-xkev
8
vulnerability VCID-rcdg-j23x-xfbn
9
vulnerability VCID-tevw-8dcp-yfh6
10
vulnerability VCID-ww3t-p3pq-gkhy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.5%252Bds-1%3Fdistro=sid
aliases CVE-2018-11783
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-au6q-ek7r-8bgr
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@8.0.2%252Bds-1%3Fdistro=sid