PT-2026-50585

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An open redirect exists due to improper validation within the urlIsRelative function in modules/httplib/url.go. An attacker can bypass this validation by using directory traversal sequences...

Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007

Drupal core ships a rebuild.php front controller that can be used to rebuild Drupal clearing the caches and rebuilding the container when the site is in an unexpected condition. This script doesn't correctly check the Host header against the list of trusted host patterns. This could result in cac...

GHSA-WW63-PV5X-VFC8 Daytona: Public sandbox previews remain accessible for up to one hour after being made private

Summary Sandbox previews that were switched from public to private could remain reachable without authentication for a short period after the change, due to a cached visibility state that was not invalidated when the sandbox's visibility changed. Impact When a sandbox owner changed a preview from...

USN-8435-1 squid vulnerabilities

It was discovered that Squid incorrectly handled FTP gateway processing under certain circumstances, which could result in an out-of-bounds read. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information...

Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

A flaw was found in Apache Tomcat. A remote attacker could exploit an inconsistent interpretation of HTTP requests, known as HTTP Request/Response Smuggling, by sending a specially crafted request with an invalid chunk extension. This vulnerability allows an attacker to manipulate the way HTTP...

CVE-2026-10638 Use-after-free in Zephyr ICMPv6 RX path when updating statistics after sending an echo reply or error

subsys/net/ip/icmpv6.c reads the network interface from a netpkt after that packet has been handed to nettrysenddata. In icmpv6handleechorequest and neticmpv6senderror, the post-send statistics update calls netpktifacereply/netpktifacepkt on the just-sent packet. The send path nettrysenddata -...

CVE-2026-10638

The CVE describes a use-after-free in Zephyr’s ICMPv6 RX path: after sending an ICMPv6 Echo Request or an error, post-send statistics update references net_pkt_iface(reply/pkt) on a packet that may already be freed by net_try_send_data (or by the driver/L2). If CONFIG_NET_TC_TX_COUNT is 0 or the ...

MAL-2026-5878 Malicious code in cache-compat-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fc75889476bd737b302c856fb1d2da1b263a93786bc27fed3978c3eb0584cd The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

Malicious code in cache-compat-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fc75889476bd737b302c856fb1d2da1b263a93786bc27fed3978c3eb0584cd The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

CLSA-2026-1781606759 ImageMagick: Fix of CVE-2026-46692

CVE-2026-46692: validate distributed pixel cache region on read and write to prevent a heap buffer over-write...

CLSA-2026-1781606508 ImageMagick: Fix of CVE-2026-46692

CVE-2026-46692: validate distributed pixel cache region on read and write to prevent a heap buffer over-write...

CLSA-2026-1781606042 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781606022 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781605653 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781605589 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CVE-2026-49214

A flaw was found in guzzlehttp/psr7, a PHP library for HTTP messages. This vulnerability allows a remote attacker to inject additional HTTP header lines by providing a specially crafted URL that contains ASCII control characters, whitespace, or DEL in the host component. This improper input...

AZL-90107 CVE-2026-46331 affecting package kernel for versions less than 6.6.144.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using tcfpoffmaxhint, but the hint does not account for the runtime header offset...

CVE-2026-46331

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using tcfpoffmaxhint, but the hint does not account for the runtime header offset...

CVE-2026-46331 net/sched: fix pedit partial COW leading to page cache corruption

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using tcfpoffmaxhint, but the hint does not account for the runtime header offset...

CVE-2026-46331 net/sched: fix pedit partial COW leading to page cache corruption

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using tcfpoffmaxhint, but the hint does not account for the runtime header offset...