Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libnginx-mod-http-lua@1:0.10.23-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/libnginx-mod-http-lua@1:0.10.23-1%2Bdeb12u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-c4ta-jqmg-wfgf lua-nginx-module: HTTP request smuggling via a crafted HEAD request CVE-2024-33452
VCID-y3tg-7fge-1yfy ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header. CVE-2020-36309

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:34:57.366407+00:00 Debian Importer Fixing VCID-c4ta-jqmg-wfgf https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:31:28.355928+00:00 Debian Importer Fixing VCID-y3tg-7fge-1yfy https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:37:03.712550+00:00 Debian Importer Fixing VCID-c4ta-jqmg-wfgf https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:34:33.915187+00:00 Debian Importer Fixing VCID-y3tg-7fge-1yfy https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:29:07.778089+00:00 Debian Importer Fixing VCID-c4ta-jqmg-wfgf https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:29:07.740823+00:00 Debian Importer Fixing VCID-y3tg-7fge-1yfy https://security-tracker.debian.org/tracker/data/json 38.1.0