{"action":"Upgrade ros-ros-comm to 1.15.13+ds1-2 or later.","affected":[{"fixed":"1.15.13+ds1-2","introduced":"0"}],"component":"ros-ros-comm","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.15.13+ds1-2"],"id":"tcs_01M5NFV0CNRS80ZREM5G9GJNN1","modified_at":"2026-10-23T18:03:30.487639814Z","published_at":"2021-09-28T13:15:07.253Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-37146","https://security-tracker.debian.org/tracker/CVE-2021-37146"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-37146","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-37146"}],"summary":"An infinite loop in Open Robotics ros_comm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in ros_comm via a crafted XMLR"}