{"action":"Upgrade libproxy to 0.4.15-r8 or later.","affected":[{"fixed":"0.4.15-r8","introduced":"0.4.0"}],"component":"libproxy","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.15","exploited":false,"fixed_versions":["0.4.15-r8"],"id":"tcs_01M6GQEEV8PSEX76M5R4BE6PC7","modified_at":"2026-11-03T06:32:31.253674316Z","published_at":"2020-09-09T21:15:11.117Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2020-25219","https://security.alpinelinux.org/vuln/CVE-2020-25219"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2020-25219#Alpine:v3.15/libproxy","url":"https://osv.dev/vulnerability/ALPINE-CVE-2020-25219"}],"summary":"url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. Th"}