Artica Proxy 4.30.000000 - Cross-Site Scripting

Artica Proxy 4.30.000000 contains a cross-site scripting vulnerability via the password parameter in /fw.login.php. id: CVE-2022-37153 info: name: Artica Proxy 4.30.000000 - Cross-Site Scripting author: arafatansari severity: medium description: | Artica Proxy 4.30.000000 contains a cross-site...

CVE-2026-16728

A flaw was found in undici. A malicious or faulty upstream server could send a partial response with incorrect length information. When undici's retry interceptor processes this, it may create a response body with a length that does not match the original Content-Length header. This can lead to...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: unleash-fips, unleash, langfuse-fips, unleash-proxy...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: unleash-fips, unleash, langfuse-fips, unleash-proxy...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: unleash-fips, unleash, langfuse-fips, unleash-proxy...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: unleash-fips, unleash, langfuse-fips, unleash-proxy...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: unleash-fips, unleash, langfuse-fips, unleash-proxy...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: unleash-fips, unleash, langfuse-fips, unleash-proxy...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: unleash-proxy, yaml-language-server, langfuse-fips, arangodb, serve...

GHSA-RGW5-RVV9-X895 vulnerabilities

Vulnerabilities for packages: unleash-proxy, langfuse, authentik, pulumi, langfuse-fips, unleash, opentelemetry-auto-instrumentations-node, rancher-api-ui, arangodb, pelias-api, authentik-fips, serve...

GHSA-7P8R-X3MC-P8W7 vulnerabilities

Vulnerabilities for packages: unleash-proxy, yaml-language-server, langfuse-fips, arangodb, serve...

CVE-2026-69152 vulnerabilities

Vulnerabilities for packages: unleash-proxy, langfuse, authentik, pulumi, langfuse-fips, unleash, opentelemetry-auto-instrumentations-node, rancher-api-ui, arangodb, pelias-api, authentik-fips, serve...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

EUVD-2026-52753

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...

Apache HTTP Server - ACL Bypass

Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. id: CVE-2024-38473 info: name: Apache HTTP Server - ACL Bypass author: pdteam severity: high...

ROOT-APP-NPM-GHSA-6X33-PW7P-HMPQ GHSA-6x33-pw7p-hmpq in http-proxy - Patched by Root

Root has patched GHSA-6x33-pw7p-hmpq in the http-proxy package for Root:npm. Multiple fixed versions available...

EUVD-2026-52687

A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...

CVE-2026-70367 Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services

A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...

CVE-2026-70367

CVE-2026-70367 affects stunnel

CVE-2026-70367

A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...