Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libnginx-mod-http-lua@1:0.10.29-2?distro=trixie
purl pkg:deb/debian/libnginx-mod-http-lua@1:0.10.29-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-c4ta-jqmg-wfgf lua-nginx-module: HTTP request smuggling via a crafted HEAD request CVE-2024-33452
VCID-y3tg-7fge-1yfy ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header. CVE-2020-36309

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:34:57.382746+00:00 Debian Importer Fixing VCID-c4ta-jqmg-wfgf https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:31:28.366656+00:00 Debian Importer Fixing VCID-y3tg-7fge-1yfy https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:37:03.728072+00:00 Debian Importer Fixing VCID-c4ta-jqmg-wfgf https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:34:33.926183+00:00 Debian Importer Fixing VCID-y3tg-7fge-1yfy https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:29:07.785216+00:00 Debian Importer Fixing VCID-c4ta-jqmg-wfgf https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:29:07.756522+00:00 Debian Importer Fixing VCID-y3tg-7fge-1yfy https://security-tracker.debian.org/tracker/data/json 38.1.0