Apt-cacher-ng Project Apt-cacher-ng 3.2-1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apt-cacher-ng_project:apt-cacher-ng:3.2-1:*:*:*:*:*:*:*

part: a version: 3.2-1 update: *

VendorApt Cacher Ng Project (2c6127dc-7868-5794-9a98-aa0010b28a0f)
ProductApt Cacher Ng (6f4c60fa-7a3c-557a-8ddb-6717d8b53e68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/apt-cacher-ng purl2cpe 2026-06-01 10:15:00.470080
pkg:deb/ubuntu/apt-cacher-ng purl2cpe 2026-06-01 10:15:00.470082
pkg:github/ashang/apt-cacher-ng purl2cpe 2026-06-01 10:15:00.470084
pkg:rpm/fedora/apt-cacher-ng purl2cpe 2026-06-01 10:15:00.470085
pkg:rpm/opensuse/apt-cacher-ng purl2cpe 2026-06-01 10:15:00.470087

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11147 vulnerable 2026-06-08 07:02:28.151033 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG
Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts (XSS) to be executed in “/html/<filename>.html”.
Published: 2025-09-29T09:26:48.244Z
Updated: 2025-09-29T11:11:50.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11146 vulnerable 2026-06-08 07:02:28.150600 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG
Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts (XSS) in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”.
Published: 2025-09-29T09:26:35.157Z
Updated: 2025-09-29T11:18:24.650Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.