PT-2026-76910

Name of the Vulnerable Software and Affected Versions cowlib versions 2.9.0 and later Description Improper encoding or escaping of output in the cow link:link/1 function allows Link header directive smuggling. The cow link:do link/1 function interpolates the target URI, rel value, and attribute...

PT-2026-41677

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 2024-02-18, the broker mishandles protocol violations during CONNECT packet parsing. When receiving a CONNECT packet with a zero-length Client ID while CleanSession is set to 0, the broker correctly replies with a CONNACK return code 0x0...