EUVD-2026-60573

Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggling via unescaped special characters in cowlink:link/1. cowlink:dolink/1 in cowlib interpolates the target URI, rel value, and attribute keys directly into the serialized Link: header valu...

GHSA-FM65-XRRR-C358 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-28753 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-HWQ5-42J9-JVQJ vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-82W2-X7HF-5H8R vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-42926 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-VXCV-H5WJ-JXR5 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-42530 vulnerabilities

Vulnerabilities for packages: nginx-mainline...

CVE-2026-40701 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-M73P-XG7Q-M8F2 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-32647 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

PT-2026-73265

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

DEBIAN-CVE-2026-74468

In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger - chip-irqsettype...

DEBIAN-CVE-2026-72053

In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-73427 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails...

CVE-2026-54171 affecting package rubygem-excon for versions less than 0.102.0-2

CVE-2026-54171 affecting package rubygem-excon for versions less than 0.102.0-2. A patched version of the package is available...

netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

A flaw was found in Netty. This vulnerability allows a remote attacker to perform request smuggling attacks due to incorrect parsing of malformed Transfer-Encoding headers. By exploiting this flaw, an attacker can bypass security controls and potentially access sensitive information or manipulate...

Astra Linux – Vulnerability in libsoup3

There is a vulnerability related to request smuggling in LibSoup’s HTTP/1 header parsing logic. The soupmessageheaders.AppendCommon function in libsoup/soup-message-headers.c appends each header value unconditionally, without checking for duplicates or conflicting Content-Length fields. This allo...

CVE-2026-66337 Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()

A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...