CVE-2026-28753 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-82W2-X7HF-5H8R vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-HWQ5-42J9-JVQJ vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-42530 vulnerabilities

Vulnerabilities for packages: nginx-mainline...

GHSA-VXCV-H5WJ-JXR5 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-42926 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-32647 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

CVE-2026-40701 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-M73P-XG7Q-M8F2 vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

GHSA-Q83H-524G-XF6H

creationtimestamp| type| source ---|---|--- 2026-08-17 16:33:14+00:00| seen| https://bsky.app/profile/seanmonstar.com/post/3mtc4wzyp3z2l...

PT-2026-73265

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

DEBIAN-CVE-2026-74468

In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger - chip-irqsettype...

DEBIAN-CVE-2026-72053

In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

HTTP-Daemon: Improper header handling

Background HTTP-Daemon provides a base class for simple HTTP servers. Description Inconsistent Interpretation of HTTP Requests. Impact The bug could potentially be exploited to gain privileged access to APIs or poison intermediate caches. Workaround There is no known workaround at this time...

CVE-2026-73427 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, ruby3.2-rails...

CVE-2026-54171 affecting package rubygem-excon for versions less than 0.102.0-2

CVE-2026-54171 affecting package rubygem-excon for versions less than 0.102.0-2. A patched version of the package is available...

netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

A flaw was found in Netty. This vulnerability allows a remote attacker to perform request smuggling attacks due to incorrect parsing of malformed Transfer-Encoding headers. By exploiting this flaw, an attacker can bypass security controls and potentially access sensitive information or manipulate...

undici vulnerable to CRLF Injection via blob-like body 'type' property

...

SUSE CVE-2026-66338

A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including leading whitespace, plus sign prefixes, and trailing invalid characters. When libsoup operates behind a strict frontend...