{"id":"DLA-4158-1","aliases":[],"status":"published","title":"fossil - HTTP client fix","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-05-09T00:00:00Z","modified":"2025-05-26T06:58:48Z","fixes":[{"ecosystem":"Debian:11","package":"fossil","fixed_in":["1:2.15.2-1+deb11u1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"fossil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.15.2-1+deb11u1"}]}],"versions":["1:2.15.2-1"]}],"sources":{"osv":[{"id":"DLA-4158-1","title":"fossil - HTTP client fix","status":"published","published":"2025-05-09T00:00:00Z","modified":"2025-05-26T06:58:48.214981Z","updated_at":"2026-11-02T15:46:12.7027Z"}]}}