175842 matches found
CVE-2026-67592
Removed by vendor...
CVE-2026-67591
Removed by vendor...
CVE-2026-67590
Removed by vendor...
CVE-2026-67589
Removed by vendor...
CVE-2026-67588
Removed by vendor...
CVE-2026-71192
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71190
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
GHSA-MX64-MJ3Q-7PRJ vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
GHSA-W8J3-PQ8G-8M7W vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
CVE-2026-46385 vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
GHSA-MC57-H6J3-3HMV vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
CVE-2026-46384 vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
GHSA-MX64-MJ3Q-7PRJ vulnerabilities
Vulnerabilities for packages: dapr...
GHSA-MC57-H6J3-3HMV vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-46384 vulnerabilities
Vulnerabilities for packages: dapr...
GHSA-W8J3-PQ8G-8M7W vulnerabilities
Vulnerabilities for packages: dapr...
