13992 matches found
EUVD-2026-37789
Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbatim to the backend while using Content-Length to determine how many request body bytes to consume. Remote attackers can desynchronize the...
CVE-2026-54387 Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization
Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbatim to the backend while using Content-Length to determine how many request body bytes to consume. Remote attackers can desynchronize the...
CVE-2026-54387
CVE-2026-54387 affects Tinyproxy up to version 1.11.3. It fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbatim to the backend while using Content-Length to consume the request body. This desynchronizes frontend/backend parsers and can enab...
CVE-2026-10696
Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026.2.0 and earlier allows a WinGet community catalog contributor to cause an installed application to be correlated to an unrelated, attacker-controlled catalog package and to execute an...
EUVD-2026-37781
Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026.2.0 and earlier allows a WinGet community catalog contributor to cause an installed application to be correlated to an unrelated, attacker-controlled catalog package and to execute an...
Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter
Summary Several direct, index-addressed Ollama proxy routes accept a caller-supplied urlidx path parameter and use it as a raw index into the admin-configured OLLAMABASEURLS list. Access control on these routes validates only whether the user may use the requested model, never which backend the...
GHSA-3G6V-2R68-PRFC Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services
Summary There is a high severity vulnerability in Traefik's Kubernetes Gateway provider affecting the crossProviderNamespaces allowlist. For HTTPRoute rules that declare multiple WRR backendRefs, Traefik evaluates the allowlist against the target backendRef.namespace instead of the route's own...
kernel: geneve: Fix use-after-free in geneve_find_dev().
A use-after-free vulnerability exists in the Linux kernel. When devnet is dismantled, the geneveexitbatchrtnl function calls unregisternetdevicequeue for each device in the network namespace. Later, when the device is freed, it is still linked to the backend UDP socket in the network namespace...
kernel: geneve: Fix use-after-free in geneve_find_dev().
A use-after-free vulnerability exists in the Linux kernel. When devnet is dismantled, the geneveexitbatchrtnl function calls unregisternetdevicequeue for each device in the network namespace. Later, when the device is freed, it is still linked to the backend UDP socket in the network namespace...
CVE-2026-53537 vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, airflow, litellm, wazuh-manager-fips, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...
CVE-2026-53539 vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, airflow, litellm, wazuh-manager-fips, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...
GHSA-5RVQ-CXJ2-64VF vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, airflow, litellm, wazuh-manager-fips, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...
GHSA-V9PG-7XVM-68HF vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, airflow, litellm, wazuh-manager-fips, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...
GHSA-VFFW-93WF-4J4Q vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, airflow, litellm, wazuh-manager-fips, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...
CVE-2026-53538 vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, airflow, litellm, wazuh-manager-fips, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...
GHSA-6JV3-5F52-599M vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, airflow, litellm, wazuh-manager-fips, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...
CVE-2026-53540 vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, airflow, litellm, wazuh-manager-fips, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...
SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured
...
Malicious code in cryptodao-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbe5f8614a264a8d3cdd2ecf8ecd2ad17292dbb5c5bcc25d0ae9d77eb8821df package.json declares postinstall: node recon.js, which auto-runs on npm install. recon.js lines 30-46 scrapes a curated list of credential-bearing...
MAL-2026-5966 Malicious code in cryptodao-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbe5f8614a264a8d3cdd2ecf8ecd2ad17292dbb5c5bcc25d0ae9d77eb8821df package.json declares postinstall: node recon.js, which auto-runs on npm install. recon.js lines 30-46 scrapes a curated list of credential-bearing...