CVE-2026-35193 Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not add Authorization to the Vary response header for requests bearing that header without Cache-Control: public, which allows remote attackers to read private...

CVE-2026-42304 affecting package python-twisted for versions less than 22.10.0-5

CVE-2026-42304 affecting package python-twisted for versions less than 22.10.0-5. A patched version of the package is available...

CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-39835 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39835 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39828 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39828 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-39821 affecting package kured for versions less than 1.15.0-5

CVE-2026-39821 affecting package kured for versions less than 1.15.0-5. A patched version of the package is available...

CVE-2026-25681 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-25681 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-27136 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-27136 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39829 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39829 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-25681 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-25681 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39834 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39834 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39827 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39827 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39821 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-39821 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-42502 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-42502 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-46597 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-46597 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-42506 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-42506 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-39821 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39821 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-42506 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-42506 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...