CLEANSTART-2026-YS82863 mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource con...

Security vulnerability affects the sonarqube package. A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service DoS...

CLEANSTART-2026-PQ26679 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

Security vulnerability affects the kafka package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...

CLEANSTART-2026-WU74095 hpack is an HTTP/2 Header Encoding for Python

Security vulnerability affects the airflow-3 package. hpack is an HTTP/2 Header Encoding for Python...

PT-2026-102728

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every decoded HTTP/2 Host header value before discarding it when :authority is already present. The discarded value bypasses saveHeader, so its bytes a...

PT-2026-102726

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a configured non-WebSocket HTTP upgrade before the upstream accepts the upgrade. An unauthenticated HTTP/2 client can place a complete...

FreeBSD -- IPv6 UDP sendto(2) bypasses jail loopback restriction

Problem Description: The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. Impact: A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback...

FreeBSD -- Heap out-of-bounds access in semop(2)

Problem Description: When semop2 blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the semaphore set's IPC identifier to detect whether the set was removed while the caller was asleep. This sequence number is...

Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC pee...

Medium: awscli-2

Issue Overview: Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file permissions the default on most systems may allow other local users on the same host to read credentials written by certain...

FreeBSD Security Advisory - FreeBSD-SA-26:69.udp

FreeBSD Security Advisory - IPv6 UDP sendto2 bypasses jail loopback restriction. A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail network isolation...

FreeBSD Security Advisory - FreeBSD-SA-26:64.sysvsem

FreeBSD Security Advisory - Heap out-of-bounds access in semop2. An unprivileged local user can trigger an out-of-bounds access on kernel heap memory, potentially leading to privilege escalation...

Amazon Linux 2 : crash (ALAS-2026-3937)

The version of crash installed on the remote host is prior to 8.0.4-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3937 advisory. A flaw was found in GDB's STABS debug format parser. Thereadmemberfunctions function in gdb/stabsread.c contains a linkedlist removal...

Important: libsoup3

Issue Overview: The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64MAX to trigge...

Amazon Linux 2 : dovecot (ALAS-2026-3935)

The version of dovecot installed on the remote host is prior to 2.2.36-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3935 advisory. An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses...

PT-2026-102723

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2 upstream HTTP/2 codec accepts a response trailer HEADERS frame without END STREAM. Envoy completes and deferred-deletes the ActiveRequest...

Amazon Linux 2 : qemu (ALAS-2026-3934)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3934 advisory. NOTE: https://gitlab.com/qemu-project/qemu/-/workitems/4073NOTE: Fixed by: https://gitlab.com/qemu-...

FreeBSD-SA-26:69.udp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:69.udp Security Advisory The FreeBSD Project Topic: IPv6 UDP sendto2 bypasses jail loopback restriction Category: core Module: udp Announced: 2026-09-29...

FreeBSD-SA-26:64.sysvsem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:64.sysvsem Security Advisory The FreeBSD Project Topic: Heap out-of-bounds access in semop2 Category: core Module: sysvsem Announced: 2026-09-29 Credits: Reo...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-132)

The version of kernel installed on the remote host is prior to 5.10.268-266.1092. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-132 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible res...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-116)

The version of kernel installed on the remote host is prior to 5.15.220-153.252. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-116 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption...