AlmaLinux 9.2 [TuxCare] Security Update: python3.11-urllib3 (ALMALINUX9.2:CLSA-2025:1763032859)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763032859 advisory. - urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cookie HTTP header special or provide any helpers for...

Rocky Linux 10.0 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2025_9148)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259148 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly...

VulnCheck KEV: CVE-2026-104286

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests...

Rocky Linux 8 [CIQ] Security Update: python3-urllib3 (crlsa-2021_1631)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20211631 advisory. python-urllib3: CRLF injection via HTTP request method CVE-2020-26137 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc Multiple Vulnerabilities (crlsa-2025_23732)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523732 advisory. httpd: Apache HTTP Server: CGI environment variable override CVE-2025-65082 modmd: Apache HTTP Server: modmd ACME, unintended retry intervals CVE-2025-557...

Rocky Linux 8 [CIQ] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (crlsa-2023_0833)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230833 advisory. python: int type in PyLongFromString does not limit amount of digits converting text to int leading to DoS CVE-2020-10735 python: open redirection...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / python-cffi-debugsource / etc Multiple Vulnerabilities (crlsa-2023_2763)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20232763 advisory. python: int type in PyLongFromString does not limit amount of digits converting text to int leading to DoS CVE-2020-10735 python: open redirection...

CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc Multiple Vulnerabilities (CENTOS7:CLSA-2023:1697739734)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1697739734 advisory. - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who...

Rocky Linux 9 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (crlsa-2022_8353)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228353 advisory. python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 python: open redirection vulnerability in lib/http/server.py may...

PT-2026-105166

RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept content/2 at line 56 calls rabbit stream manager:create super stream/... directly after is authorized which only checks the management tag + vhost access via is authorized vhost. The...

GHSA-4MH8-R7RC-XPVC fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

Impact fastify crashes with an uncaught ERRHTTP2INVALIDCONNECTIONHEADERS exception when a route that registers a response trailer via reply.trailer is served over HTTP/2. Fastify unconditionally adds the Transfer-Encoding: chunked header when a trailer is set, which is forbidden on HTTP/2, so...

EUVD-2026-80315

fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses...

fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

Impact fastify crashes with an uncaught ERRHTTP2INVALIDCONNECTIONHEADERS exception when a route that registers a response trailer via reply.trailer is served over HTTP/2. Fastify unconditionally adds the Transfer-Encoding: chunked header when a trailer is set, which is forbidden on HTTP/2, so...

NPM: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

NPM: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses vulnerability discovered by ? in WordPress Npm fastify versions 5.12.5...

GHSA-HXM8-2XGR-2P9M vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, openstack-placement-2025.1, openstack-nova-2025.2, openstack-octavia-2025.2, openstack-glance-2025.2-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.1-fips, semgrep, openstack-keystone-2025.2-fips, openstack-nova-2026....

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: ansible-operator, azureml-inference-server-http-fips, kserve-models-web-app, kserve-pmmlserver, pgadmin4, prefect, az, kserve-sklearnserver, jupyterhub-k8s-singleuser-sample, kubeflow, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines,...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: ansible-operator, azureml-inference-server-http-fips, kserve-models-web-app, kserve-pmmlserver, pgadmin4, prefect, az, kserve-sklearnserver, jupyterhub-k8s-singleuser-sample, kubeflow, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines,...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: ansible-operator, azureml-inference-server-http-fips, kserve-models-web-app, kserve-pmmlserver, pgadmin4, prefect, az, kserve-sklearnserver, jupyterhub-k8s-singleuser-sample, kubeflow, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines,...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, openstack-placement-2025.1, openstack-nova-2025.2, openstack-octavia-2025.2, openstack-glance-2025.2-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.1-fips, semgrep, openstack-keystone-2025.2-fips, openstack-nova-2026....

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: ansible-operator, azureml-inference-server-http-fips, kserve-models-web-app, kserve-pmmlserver, pgadmin4, prefect, az, kserve-sklearnserver, jupyterhub-k8s-singleuser-sample, kubeflow, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines,...