2785 matches found
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +34445 more potentially affected by CVE-2026-42587 via io.netty:netty-codec-http2 (>=4.1.0.beta4, <=4.1.132.final)
io.netty:netty-codec-http2 MAVEN version =4.1.0.beta4, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4097 more potentially affected by CVE-2026-42587 via io.netty:netty-codec-http2 (>=4.2.0.alpha1, <=4.2.12.final)
io.netty:netty-codec-http2 MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42587 Source advisory: MEND:CVE-2026-42587...
CVE-2026-42926
The connected F5 advisory confirms CVE-2026-42926 affects NGINX Open Source’s ngx_http_proxy_v2_module when proxy_http_version is set to 2 and proxy_set_body is used. The vulnerability allows a remote attacker to inject arbitrary HTTP/2 frame headers and payload bytes into the upstream connection...
RLSA-2026:15968 Moderate: libsoup3 security update
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
Exploit for Double Free in Apache Http_Server
CVE-2026-23918 — Apache modhttp2 Double Free Affected: A...
MGASA-2026-0129 Updated apache packages fix security vulnerabilities
http2: double free and possible RCE on early reset. CVE-2026-23918 modrewrite elevation of privileges via apexpr. CVE-2026-24072 buffer overflow in modproxyajp via ajpmsgcheckheader. CVE-2026-28780 modmd unrestricted OCSP response. CVE-2026-29168 moddavlock indirect lock crash. CVE-2026-29169...
org.apache.tomcat:tomcat-catalina-ha (8.5.19), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.19) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.19)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.19 - org.apache.tomcat:tomcat-catalina-jmx-remote...
com.github.psi-probe:psi-probe-tomcat85 (>=3.4.3, <=3.4.5), org.apache.tomcat:tomcat-catalina-ha (8.5.51) +9 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.51)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =3.4.3, =0.14, =0.10, =7.10.0, =7.10.0, =7.10.0,...
com.github.psi-probe:psi-probe-tomcat85 (>=3.4.3, <=3.4.5), org.apache.tomcat:tomcat-catalina-ha (8.5.51) +9 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.51)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =3.4.3, =0.14, =0.10, =7.10.0, =7.10.0, =7.10.0,...
nl.nlighten:tomcat_exporter_client (0.0.7), nl.nlighten:tomcat_exporter_servlet (0.0.7) +6 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (8.5.33)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - nl.nlighten:tomcatexporterclient 0.0.7 - nl.nlighten:tomcatexporterservlet 0.0.7 -...
nl.nlighten:tomcat_exporter_client (0.0.7), nl.nlighten:tomcat_exporter_servlet (0.0.7) +6 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.33)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - nl.nlighten:tomcatexporterclient 0.0.7 - nl.nlighten:tomcatexporterservlet 0.0.7 -...
nl.nlighten:tomcat_exporter_client (0.0.7), nl.nlighten:tomcat_exporter_servlet (0.0.7) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.33)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - nl.nlighten:tomcatexporterclient 0.0.7 - nl.nlighten:tomcatexporterservlet 0.0.7 -...
org.apache.tomcat:tomcat-catalina-ha (8.5.19), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.19) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.19)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.19 - org.apache.tomcat:tomcat-catalina-jmx-remote...
Improper Validation of Syntactic Correctness of Input
Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the processing of HTTP/2 request headers. An attacker can cause unexpected behavior or potentially...
Exploit for Double Free in Apache Http_Server
CVE-2026-23918 Double-free in Apache httpd modhttp2 stream c...
BIT-GOLANG-2026-33814 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...
RHEL 10 : libsoup3 (RHSA-2026:15968)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:15968 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup,...
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
...
