Apt-Cacher-Ng Project Apt-Cacher-Ng
5 CVEs affecting Apt-Cacher-Ng Project Apt-Cacher-Ng. Latest disclosed: 2025-09-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18899 | Medium | 6.2 | 2020-01-23 | The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers… |
CVE-2017-7443 | Medium | 6.1 | 2017-04-05 | apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad]… |
CVE-2020-5202 | Medium | 5.5 | 2020-01-21 | apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program a… |
CVE-2025-11147 | Medium | 5.4 | 2025-09-29 | Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts (XSS) to be executed in “/html/<filename>.html”. |
CVE-2025-11146 | Medium | 5.4 | 2025-09-29 | Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts (XSS) in the web management app… |