AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793016709)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793016709 advisory. - When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an...

AlmaLinux 9.2 [TuxCare] Security Update: grafana-pcp Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793005929)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793005929 advisory. - When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an...

PT-2026-123283

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST STREAM on a completed stream, planting a null pointer, and then send a PUSH PROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

PT-2026-123343

Allocation of Resources Without Limits or Throttling vulnerability in hackney conn in benoitc hackney allows a malicious HTTP server to exhaust client memory via an oversized or highly compressed response body. hackney:request/5 and hackney:body/1 return the whole response body, and nothing bound...

PT-2026-123295

Improper Handling of Highly Compressed Data Data Amplification vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a small HPACK-compressed HEADERS block. The block stores one large cookie value in the HPACK dynamic...

PT-2026-123301

Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit allows an unauthenticated remote attacker to bypass per-connection resource limits via a single TCP write that carries several frames, one of which raises a stream error. When a frame raises StreamError...

Mat Trudel Bandit resource management error vulnerability

Mat Trudel Bandit versions 0.3.3 through 1.14.0 contain a resource management error vulnerability. This vulnerability stems from improper handling of highly compressed data data amplification in the HTTP/2 implementation; only the size limit of compression blocks is enforced while decoding list...

Mat Trudel Bandit resource management error vulnerability

Versions of Mat Trudel Bandit from 0.3.1 up to but not including 1.14.0 contain a resource management vulnerability. This vulnerability arises because the HTTP/2 implementation lacks restrictions or throttling on resource allocation. In Bandit.HTTP2.Connection.handleframe/3, the receive window is...

Mat Trudel Bandit resource management error vulnerability

Versions of Mat Trudel Bandit from 0.3.6 up to but not including 1.14.0 contain a resource management error vulnerability. This flaw arises from unrestricted or throttling-free resource allocation within the HTTP/2 implementation. Bandit.HTTP2.Connection passes remotesettings.headertablesize to...

Mat Trudel Bandit resource management error vulnerability

Versions 1.4.0 through 1.14.0 of Mat Trudel Bandit contain a resource management error vulnerability. This flaw arises because the HTTP/2 request body reader fails to impose restrictions or throttling on resource allocation. Unauthenticated remote attackers can send WINDOWUPDATE or empty SETTINGS...

ALSA-2026:89752 Important: oci-seccomp-bpf-hook security update

OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fixes: net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to...

MiracleLinux 8 : go-toolset:rhel8 (AXSA:2026-2159:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2159:01 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via...

PT-2026-123304

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parse integer/2 in...

Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2026-3267)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3267 advisory. During an upload, curl mishandles HTTP/2 RSTSTREAM received from the server with reason HTTP11REQUIRED or REFUSEDSTREAM leading to a use after free of a struct Curleasy object. CVE-2026-92392 Tenable h...

Node.js HTTP/2 Reentrant Send Use-After-Free Checker

Node.js contains an HTTP/2 reentrant send heap use-after-free vulnerability. This offline proof of concept checker assesses operator-supplied Node.js version evidence for potentially affected 22.x, 24.x, and 26.x releases...

Node.js 24.18.0 HTTP/2 Retained Header Memory Exhaustion

Node.js versions before 22.23.2 and 24.18.1 contain an HTTP/2 retained-header memory-accounting flaw that can bypass maxSessionMemory limits and cause remote memory exhaustion. This tool assesses supplied version evidence offline...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2026-146)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-146 advisory. The HTTP/2 server could refund connection-level flow control twice for the same data: Once when a...

Amazon Linux 2023 : yq (ALAS2023-2026-3257)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3257 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-3274)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3274 advisory. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global...

Amazon Linux 2023 : ecs-init (ALAS2023-2026-3321)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3321 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each ent...