Lucene search
+L

6440 matches found

RedhatCVE
RedhatCVE
•added 2026/02/10 7:23 p.m.•16 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2026/02/10 12:26 a.m.•18 views

SUSE CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/02/10 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-0398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor. CVE-2026-0398 Note that Nessus relies on th...

5.3CVSS6AI score0.00345EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/02/10 12:00 a.m.•16 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcs (UTSA-2026-005306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005306 advisory. Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a...

5.4CVSS6.7AI score0.00494EPSS
SaveExploits0References4
NVD
NVD
•added 2026/02/09 8:15 p.m.•19 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS0.00566EPSS
SaveExploits1References4
PyPA
PyPA
•added 2026/02/09 8:15 p.m.•23 views

PYSEC-2026-2197

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References4Affected Software1
osv-pysec
osv-pysec
•added 2026/02/09 8:15 p.m.•20 views

PYSEC-2026-2197

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/09 6:49 p.m.•11 views

CVE-2026-25480

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/02/09 6:49 p.m.•51 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS0.00566EPSS
SaveExploits1References4
osv-cve
osv-cve
•added 2026/02/09 6:49 p.m.•19 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS5.7AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/02/09 6:49 p.m.•10 views

CVE-2026-25480 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remo...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/09 6:49 p.m.•91 views

CVE-2026-25480

Litestar prior to 2.20.0 uses FileStore cache keys derived from Unicode NFKD normalization and ord() substitution without separators, enabling cache key collisions when used as a response-cache backend. An unauthenticated remote attacker can craft paths to trigger collisions, causing one URL to s...

6.5CVSS6AI score0.00566EPSS
SaveExploits1References4Affected Software1
osv-ghsa
osv-ghsa
•added 2026/02/09 5:19 p.m.•21 views

GHSA-VXQX-RH46-Q2PG Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Summary FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remote attacker can trigger cache key collisions via crafted paths, causing one UR...

6.5CVSS6.1AI score0.00566EPSS
SaveExploits1References6
NVD
NVD
•added 2026/02/09 3:16 p.m.•23 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS0.00345EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2026/02/09 3:16 p.m.•15 views

UBUNTU-CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/02/09 3:16 p.m.•16 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0References3
OSV
OSV
•added 2026/02/09 3:16 p.m.•19 views

UBUNTU-CVE-2025-59023

Crafted delegations or IP fragments can poison cached delegations in Recursor...

8.2CVSS5.8AI score0.00304EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/02/09 2:20 p.m.•39 views

CVE-2026-0398

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score0.00345EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/02/09 2:20 p.m.•61 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS0.00345EPSS
SaveExploits0References1
osv-cve
osv-cve
•added 2026/02/09 2:20 p.m.•14 views

CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

5.3CVSS6.1AI score
SaveExploits0References5
Rows per page
Query Builder