{"action":"Upgrade parcimonie to 0.8.1-1 or later.","affected":[{"fixed":"0.8.1-1","introduced":"0"}],"component":"parcimonie","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.8.1-1"],"id":"tcs_01M5NAQ9MWQYHKQNG7EBK2VQHB","modified_at":"2026-10-23T15:47:26.015765190Z","published_at":"2014-02-14T15:55:06.203Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-1921","https://security-tracker.debian.org/tracker/CVE-2014-1921"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-1921","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-1921"}],"summary":"parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors."}