{"action":"Upgrade apt-cacher-ng to 0.7.26-2 or later.","affected":[{"fixed":"0.7.26-2","introduced":"0"}],"component":"apt-cacher-ng","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.7.26-2"],"id":"tcs_01M5NATYHSJB85XW4988HSRY62","modified_at":"2026-10-23T15:47:36.894205282Z","published_at":"2014-10-06T23:55:08.903Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-4510","https://security-tracker.debian.org/tracker/CVE-2014-4510"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-4510#Debian:13/apt-cacher-ng","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-4510"}],"summary":"Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL."}