CVE-2026-42945

CVE-2026-42945: NGINX Rift Heap-Pufferüberlauf-Schwachstelle Überblick CVE-2026-42945 ist eine schwerwiegende Heap-Pufferüberlauf-Schwachstelle im NGINX-Server, bekannt als "NGINX Rift". Die Schwachstelle existiert in der Verarbeitungslogik der rewrite- und set-Direktiven von NGINX. Wenn bestimmt...

CVE-2026-44966: Improperly Controlled Modification of Object Prototype Attributes

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issue occurs during the processing of set directives in Velocity templates. If an application renders a template controll...

PT-2026-39322

Name of the Vulnerable Software and Affected Versions Velocity.js versions prior to 2.1.6 Description A prototype pollution issue exists during the processing of set directives in Velocity templates. This occurs because the engine accepts arbitrary path keys and performs assignments without...