{"action":"Upgrade neon27 to 0.28.2-4 or later.","affected":[{"fixed":"0.28.2-4","introduced":"0"}],"component":"neon27","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["0.28.2-4"],"id":"tcs_01M5N92ZWDHV9CJ338PW3M228H","modified_at":"2026-10-23T17:47:50.473535236Z","published_at":"2008-08-27T15:21:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-3746","https://security-tracker.debian.org/tracker/CVE-2008-3746"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-3746#Debian:14/neon27","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-3746"}],"summary":"neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and th"}