PT-2026-100612

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100112

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95409

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read exists in the gptp mi qualify announce function within subsys/net/l2/ethernet/gptp/gptp mi.c. The issue occurs when processing the Path Tra...

PT-2026-101715

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100922

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-93568: Improper Input Validation

A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's HTTP-object conversion path incorrectly processes these requests as regular HTTP/1.1 CONNECT requests, leading to a loss of critical...

PT-2026-100685

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100328

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-61552: Improper Control of Generation of Code

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

PT-2026-95420

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the HTTP/2 codec when converting HTTP/1 CONNECT requests to HTTP/2. The component incorrectly utilizes the Host header instead of the CONNECT authority-form request-target to...

PT-2026-95422

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description An issue exists in the HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request contains both an absolute-form request-target and a conflicting Host header, the system incorrectly prioritize...

PT-2026-95421

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists where the HTTP-object conversion path incorrectly processes specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests as regular HTTP/1.1 CONNECT requests. This misinterpretati...

PT-2026-100846

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101147

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95362

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the HTTP/2 HpackEncoder. A remote attacker can trigger a Denial of Service DoS by sending HTTP/2 SETTINGS frames containing an excessively large MAX HEADER TABLE SIZE. This...

PT-2026-95511

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the HTTP/2 stack allows a remote attacker to inject prohibited characters, including NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validatio...

PT-2026-100822

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-93567: Improper Input Validation

A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leadi...

PT-2026-102119

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-93492: Undefined Security Weakness

A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This causes the HpackEncoder to store an excessive number of unique headers, leading to increased CPU usage and memory consumption, ultimatel...