{"action":"Upgrade libmicrohttpd to 0.9.75-6 or later.","affected":[{"fixed":"0.9.75-6","introduced":"0"}],"component":"libmicrohttpd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.9.75-6"],"id":"tcs_01M5NHZ9JEMQX32VYET1AS34YX","modified_at":"2026-10-26T18:01:46.430702270Z","published_at":"2023-02-28T20:15:10.157Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-27371","https://security-tracker.debian.org/tracker/CVE-2023-27371"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-27371#Debian:13/libmicrohttpd","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-27371"}],"summary":"GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows a"}