{"action":"Upgrade tor to 0.4.9.9-1 or later.","affected":[{"fixed":"0.4.9.9-1","introduced":"0"}],"component":"tor","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.4.9.9-1"],"id":"tcs_01M5NVEAZ35P6PNN6Y8BFX7Q69","modified_at":"2026-10-23T17:47:35.774314345Z","published_at":"2026-08-20T22:18:06.070Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-77642","https://security-tracker.debian.org/tracker/CVE-2026-77642"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-77642","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-77642"}],"summary":"tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major f"}