26 matches found
CVE-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF
CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host...
CVE-2026-29085
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.12.4, when using streamSSE in Streaming Helper, the event, id, and retry fields were not validated for carriage return \r or newline \n characters. Because the SSE protocol uses line breaks as...
MiracleLinux 7 : php-5.4.16-48.0.10.el7.AXS7 (AXSA:2025-10839:09)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10839:09 advisory. CVE-2025-1736: fix incorrect validation of CRLF in http headers CVEs: CVE-2025-1736 In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. befor...
SMTP Injection
Jakarta Mail is vulnerable to SMTP injection. The vulnerability is due to improper input validation of SMTP message fields of raw carriage return and line feed \r and \n UTF-8 characters in headers and parameters, An attackers can exploit this to inject additional SMTP commands or split messages ...
