Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/busybox@1:1.37.0-8?distro=trixie
purl pkg:deb/debian/busybox@1:1.37.0-8?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-jjqh-pw7r-buau In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. CVE-2025-46394
VCID-n1u3-njfx-vfcp busybox: A heap-buffer-overflow CVE-2023-42366
VCID-t62w-rrsb-vqgy busybox: BusyBox wget: HTTP request-target allows header injection CVE-2025-60876

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-03T07:20:06.557098+00:00 Debian Importer Fixing VCID-t62w-rrsb-vqgy https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:20:06.535477+00:00 Debian Importer Fixing VCID-jjqh-pw7r-buau https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:20:06.492023+00:00 Debian Importer Fixing VCID-n1u3-njfx-vfcp https://security-tracker.debian.org/tracker/data/json 38.1.0