Search for packages
| purl | pkg:deb/debian/uwsgi@2.0.7-1 |
| Next non-vulnerable version | 2.0.20-2~bpo11+1 |
| Latest non-vulnerable version | 2.0.20-2~bpo11+1 |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-cb96-v58z-aaan
Aliases: CVE-2018-7490 GHSA-h2vm-c85r-5vh5 PYSEC-2018-78 |
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-k8c8-d9j5-aaaf
Aliases: CVE-2018-6758 |
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T19:03:45.115818+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T15:49:39.322497+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:45:43.245313+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T10:18:06.818925+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 | 36.1.3 |
| 2025-06-21T10:08:02.310644+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-20T23:42:50.652722+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | None | 36.1.3 |
| 2025-06-20T19:36:28.152045+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | None | 36.1.3 |
| 2025-06-08T12:00:02.400263+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:32:57.647767+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T08:43:01.584133+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:39:54.234918+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T04:05:45.369194+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 | 36.1.0 |
| 2025-06-08T03:57:13.891673+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-07T17:05:45.140121+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | None | 36.1.0 |
| 2025-06-07T13:31:39.730937+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | None | 36.1.0 |
| 2025-04-12T17:45:19.384832+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:17:22.873273+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T07:14:31.810057+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:12:19.609774+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T02:34:12.418294+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 | 36.0.0 |
| 2025-04-08T02:25:11.544242+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-07T15:39:11.098537+00:00 | Debian Oval Importer | Affected by | VCID-k8c8-d9j5-aaaf | None | 36.0.0 |
| 2025-04-07T12:07:04.875070+00:00 | Debian Oval Importer | Affected by | VCID-cb96-v58z-aaan | None | 36.0.0 |