{"action":"Upgrade cfrpki to 1.4.0-1 or later.","affected":[{"fixed":"1.4.0-1","introduced":"0"}],"component":"cfrpki","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.4.0-1"],"id":"tcs_01M5NG1AQEQVM7M7164JE8W30G","modified_at":"2026-10-23T18:04:15.932377811Z","published_at":"2021-11-09T17:15:07.783Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-43174","https://security-tracker.debian.org/tracker/CVE-2021-43174"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-43174","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-43174"}],"summary":"NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-"}