{"action":"Upgrade apt to 1.0.9 or later.","affected":[{"fixed":"1.0.9","introduced":"0"}],"component":"apt","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1.0.9"],"id":"tcs_01M5NAPGWNFS0MKD49QZ1VC4HX","modified_at":"2026-10-23T15:47:23.393400678Z","published_at":"2014-11-03T22:55:07.303Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-0487","https://security-tracker.debian.org/tracker/CVE-2014-0487"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-0487#Debian:13/apt","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-0487"}],"summary":"APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors."}