{"action":"Upgrade gsoap to 2.8.104-3 or later.","affected":[{"fixed":"2.8.104-3","introduced":"0"}],"component":"gsoap","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.8.104-3"],"id":"tcs_01M5NEJRBM5487Y5BTXCQZTG7X","modified_at":"2026-10-26T12:02:25.803570532Z","published_at":"2021-02-10T20:15:14.913Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-13576","https://security-tracker.debian.org/tracker/CVE-2020-13576"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-13576#Debian:14/gsoap","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-13576"}],"summary":"A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HT"}