Search for packages
| purl | pkg:deb/debian/uwsgi@2.0.7-1%2Bdeb8u2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-crdw-b2xz-sugu
Aliases: CVE-2018-6758 |
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length. |
Affected by 0 other vulnerabilities. |
|
VCID-yknv-cdfj-rbhj
Aliases: CVE-2018-7490 GHSA-h2vm-c85r-5vh5 PYSEC-2018-78 |
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal. |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-yknv-cdfj-rbhj | uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal. |
CVE-2018-7490
GHSA-h2vm-c85r-5vh5 PYSEC-2018-78 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-01T13:42:48.493752+00:00 | Debian Oval Importer | Affected by | VCID-yknv-cdfj-rbhj | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |
| 2025-08-01T13:05:33.593429+00:00 | Debian Oval Importer | Affected by | VCID-crdw-b2xz-sugu | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |
| 2025-08-01T10:38:49.486935+00:00 | Debian Oval Importer | Affected by | VCID-yknv-cdfj-rbhj | https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 | 37.0.0 |
| 2025-08-01T10:30:09.244520+00:00 | Debian Oval Importer | Fixing | VCID-yknv-cdfj-rbhj | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 37.0.0 |