janusec

Janusec Application Gateway / JANUSEC应用网关 English Readme 提供快速、安全的应用交付 介绍PPT： https://www.janusec.com/download/Janusec-Application-Gateway-CN.pdf 主要功能 JANUSEC应用网关的主要功能有： 向Web应用提供统一的安全接入，包括HTTPS、身份认证、安全防御（WAF/CC）等。如Web应用是通过K8S Pods部署的，该网关也可以作为K8S Ingress Controller使用，向Pods提供跟普通Web应用同样的接入和安全特性。...

CVE-2026-124574

A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects the function beginSelectionSession of the file backend/internal/application/gateway/video.go of the component Video Job Retry Handler. This manipulation causes improper authorization. It is possible to...

CVE-2026-124574

The chenyme grok2api software, version 3.1.6 and below , contains a vulnerability in the Video Job Retry Handler component. Specifically, the beginSelectionSession function in backend/internal/application/gateway/video.go is susceptible to improper authorization , which could allow for remote att...

EUVD-2026-119862

A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects the function beginSelectionSession of the file backend/internal/application/gateway/video.go of the component Video Job Retry Handler. This manipulation causes improper authorization. It is possible to...

AZL-111805 CVE-2026-97045 affecting package application-gateway-kubernetes-ingress 1.7.7-7

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

AZL-111802 CVE-2026-78661 affecting package application-gateway-kubernetes-ingress 1.7.7-7

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...

CVE-2026-78659 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7

CVE-2026-78659 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7. A patched version of the package is available...

CVE-2026-78669 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7

CVE-2026-78669 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7. A patched version of the package is available...

CVE-2026-78660 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7

CVE-2026-78660 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7. A patched version of the package is available...

CVE-2026-97032 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7

CVE-2026-97032 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7. A patched version of the package is available...

Exploit for CVE-2026-111497

CVE-2026-111497: Interim Mitigation for Azure Application Gate...

AZL-107144 CVE-2026-97032 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107138 CVE-2026-78669 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107135 CVE-2026-78659 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107141 CVE-2026-78660 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-7

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107147 CVE-2026-78663 affecting package application-gateway-kubernetes-ingress 1.7.7-6

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

pingap v0.13.10

Pingap A reverse proxy and application gateway built on Cloudflare Pingora. It is configured through TOML files or a web admin that is part of the binary, takes changes without a restart, and comes with more than thirty plugins. 中文说明 | Documentation · 中文文档 | Examples | Plugins | Crates | Upgradin...

CVE-2026-17617

IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of URLs specified in custom resources...

CVE-2026-17617

IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of URLs specified in custom resources...

CVE-2026-17617

IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of URLs specified in custom resources...