@micahflee the CVE in question is unlikely to effect ICEBreaker https://httpd.apache.org/security/vulnerabilities_24.html "Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable." basically, the server would have to behind a reverse proxy, and you'd have to have control over the server that is running behind said reverse proxy, and you could use that to take control of the server running the proxy.. so if you were able to have prerequisite conditions to actually do this, ICEBlock would already be compromised i would agree the response def shouldn't be blocking you outright and updating prolly won't hurt or anything, and ICEBlock in general screams honeypot, and thus is generally unexploitable. and not actually an immediate issue,