PT-2026-89420

Name of the Vulnerable Software and Affected Versions containerization versions prior to 0.41.0 Description A remote attacker controlling a container registry can redirect a client's token request to a host of their choice, leading to the disclosure of the victim's registry credentials to that...

ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting

Failing to properly validate the HTTP host-header TYPO3 CMS is susceptible to host spoofing. TYPO3 uses the HTTP host-header to generate absolute URLs in several places like 404 handling, https enforcement, password reset links and many more. Since the host header itself is provided by the client...