28887 matches found
PT-2026-101700
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100780
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100612
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100112
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95409
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read exists in the gptp mi qualify announce function within subsys/net/l2/ethernet/gptp/gptp mi.c. The issue occurs when processing the Path Tra...
PT-2026-101715
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100922
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-93568: Improper Input Validation
A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's HTTP-object conversion path incorrectly processes these requests as regular HTTP/1.1 CONNECT requests, leading to a loss of critical...
CVE-2026-93569: Inconsistent Interpretation of HTTP Requests
A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request includes both an absolute-form request-target and a conflicting Host header, Netty incorrectly prioritizes the Host header for the HTTP/2...
PT-2026-100822
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-93567: Improper Input Validation
A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leadi...
PT-2026-101530
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
Oracle Linux 10 : sudo (ELSA-2026-68692)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68692 advisory. - Fix CVE-2026-82474: execveat2 intercept/logsubcmds bypass Tenable has extracted the preceding description block directly from the Oracle Linux security...
PT-2026-102119
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95421
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists where the HTTP-object conversion path incorrectly processes specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests as regular HTTP/1.1 CONNECT requests. This misinterpretati...
CVE-2026-93492: Undefined Security Weakness
A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This causes the HpackEncoder to store an excessive number of unique headers, leading to increased CPU usage and memory consumption, ultimatel...
CVE-2026-71418: Inefficient Algorithmic Complexity
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 processing in rust/src/http2/http2.rs retains previously processed HTTP/2 DATA frame contents instead of clearing the internal buffer...
CVE-2026-93579: Undefined Security Weakness
A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validation. When these values cross an HTTP/2 to HTTP/1.1 translation boundary,...