{"action":"Upgrade request-tracker4 to 4.0.7-2 or later.","affected":[{"fixed":"4.0.7-2","introduced":"0"}],"component":"request-tracker4","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["4.0.7-2"],"id":"tcs_01M5NA7H9XHZ7W4WRHVVF2P38J","modified_at":"2026-10-23T17:47:41.933071730Z","published_at":"2013-07-24T12:01:45.100Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2012-6580","https://security-tracker.debian.org/tracker/CVE-2012-6580"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2012-6580","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2012-6580"}],"summary":"Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, does not ensure that the UI labels unencrypted messages as unencrypted, which might make it easier for re"}