Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through improper handling of case-insensitive URL schemes in the FilterDeadline function. An attacker can access arbitrary files within the container by submitting URLs with mixed-case or uppercase schem...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through improper handling of case-insensitive URL schemes in the FilterDeadline function. An attacker can access arbitrary files within the container by submitting URLs with mixed-case or uppercase schem...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through improper handling of case-insensitive URL schemes in the FilterDeadline function. An attacker can access arbitrary files within the container by submitting URLs with mixed-case or uppercase schem...

CVE-2026-27018: Improper Limitation of a Pathname to a Restricted Directory

Gotenberg is an API for converting document formats. Prior to version 8.29.0, the fix introduced for CVE-2024-21527 can be bypassed using mixed-case or uppercase URL schemes. This issue has been patched in version 8.29.0...

Gotenberg code issue vulnerabilities

Gotenberg is an open-source, developer-friendly API developed by Gotenberg. It is used to convert various document formats into PDF files. Versions of Gotenberg prior to 8.29.0 contained code vulnerabilities. These vulnerabilities were due to a patch that addressed CVE-2024-21527, which could be...

CVE-2026-32884: Improper Certificate Validation

Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...

Botan Trust Management Vulnerability

Botan is a C++ encryption library developed by Jack Lloyd as an individual project. Versions of Botan prior to 3.11.0 had a trust management vulnerability. This vulnerability stemmed from improper checks of mixed-case common names when processing X.509 certificate paths, which could lead to...

PT-2026-29126

Name of the Vulnerable Software and Affected Versions Botan versions prior to 3.11.0 Description Botan is a C++ cryptography library. When processing X.509 certificate paths with DNS name constraints, a case-sensitive comparison of the Common Name CN allowed a certificate to bypass restrictions...

CVE-2026-0558

creationtimestamp| type| source ---|---|--- 2026-03-29 18:33:36+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi7rwhgj2f2e 2026-03-29 18:38:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7sa2n63j2r 2026-03-29 19:15:55+00:00|...

CVE-2025-15381

creationtimestamp| type| source ---|---|--- 2026-03-27 19:18:40+00:00| published-proof-of-concept| Telegram/1bFqVBg1WZRYib4qCiBn36zcLriGuSpWJXWdU6ZWtzYtM 2026-03-27 19:18:53+00:00| seen| Telegram/aqievDs9oCICHmk4C8wabuGpxUWUtlG5g0Gk9aIz6TfeTOo 2026-03-27 22:15:31+00:00| seen|...

CVE-2026-4905

creationtimestamp| type| source ---|---|--- 2026-03-27 00:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyt4tzt522i 2026-03-27 01:18:53+00:00| seen| Telegram/67MCm8uvWkL1PFFVLqu-Ae9nhYuAfQmsKMFjCSOu4hiA4mc 2026-03-27 01:18:59+00:00| seen|...

PT-2026-53871

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A buffer over-read can occur in the g regex replace function when the G REGEX RAW compile flag is used alongside case-change replacement escapes. This happens because the string append function...

CVE-2026-3532

A flaw was found in the Drupal OpenID Connect / OAuth client. This vulnerability, stemming from improper handling of case sensitivity, allows an attacker to escalate their privileges. This could enable an unauthorized user to gain elevated access rights, potentially leading to unauthorized action...

CVE-2026-32504

creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:00+00:00| seen| Telegram/ZlwyyZCGobz0DL3VkciBBst8GvSl0UBVZV3ZV9Oa2yUbLdM...

CVE-2026-27077

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:15+00:00| seen| Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco...

EUVD-2026-16389

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0...

CVE-2026-3532

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0...

CVE-2026-3532

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0...

CVE-2026-3532 OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0...

CVE-2026-3532 OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0...