CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

138583 matches found

Github Security Blog•added 2026/09/30 11:53 p.m.•25 views

fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

Impact fastify crashes with an uncaught ERRHTTP2INVALIDCONNECTIONHEADERS exception when a route that registers a response trailer via reply.trailer is served over HTTP/2. Fastify unconditionally adds the Transfer-Encoding: chunked header when a trailer is set, which is forbidden on HTTP/2, so...

5.9CVSS5.8AI score0.00412EPSS

SaveExploits0References7Affected Software1

Patchstack•added 2026/09/30 11:53 p.m.•19 views

NPM: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

NPM: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses vulnerability discovered by ? in WordPress Npm fastify versions 5.12.5...

5.9CVSS5.8AI score0.00412EPSS

SaveExploits0References7Affected Software1

Chainguard•added 2026/09/30 8:54 p.m.•21 views

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: ansible-operator, azureml-inference-server-http-fips, kserve-models-web-app, kserve-pmmlserver, pgadmin4, prefect, az, kserve-sklearnserver, jupyterhub-k8s-singleuser-sample, kubeflow, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines,...

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•17 views

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, openstack-placement-2025.1, openstack-nova-2025.2, openstack-octavia-2025.2, openstack-glance-2025.2-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.1-fips, semgrep, openstack-keystone-2025.2-fips, openstack-nova-2026....

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•20 views

GHSA-HXM8-2XGR-2P9M vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•25 views

CVE-2026-49265 vulnerabilities

6.8CVSS5.8AI score0.00375EPSS

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•25 views

GHSA-XPV3-W29H-X7CV vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•18 views

GHSA-R6X4-923Q-G947 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•19 views

CVE-2026-49264 vulnerabilities

6.1CVSS5.8AI score0.00314EPSS

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•22 views

GHSA-W6J9-CWV2-H6WQ vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•21 views

CVE-2026-102274 vulnerabilities

7.5CVSS6.2AI score0.00389EPSS

SaveExploits1

Chainguard•added 2026/09/30 8:54 p.m.•19 views

CVE-2026-102271 vulnerabilities

7.4CVSS7.3AI score0.0018EPSS

SaveExploits1

Chainguard•added 2026/09/30 8:54 p.m.•18 views

GHSA-P4G4-X82P-Q773 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/09/30 8:54 p.m.•21 views

GHSA-2GX3-RCP4-G85Q vulnerabilities

5.8AI score

SaveExploits0

osv_cleanstart•added 2026/09/30 8:39 p.m.•7 views

CLEANSTART-2026-GF82267 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface

CVE-2026-56853 affects multiple packages. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. See references for individual vulnerability details...

9.8CVSS6.2AI score0.00568EPSS

SaveExploits0References3

osv_cleanstart•added 2026/09/30 8:20 p.m.•8 views

CLEANSTART-2026-TQ18292 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

Security vulnerability affects the crane package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

7.5CVSS6AI score0.00781EPSS

SaveExploits0References3

osv_cleanstart•added 2026/09/30 7:40 p.m.•7 views

CLEANSTART-2025-ST85629 Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

Security vulnerability affects the containerd package. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service...

9.8CVSS7.7AI score0.87399EPSS

SaveExploits0References3

osv_cleanstart•added 2026/09/30 7:40 p.m.•7 views

CLEANSTART-2025-AF65508 Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

Security vulnerability affects the containerd package. Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service...

9.8CVSS7.7AI score0.82813EPSS

SaveExploits0References3

osv_cleanstart•added 2026/09/30 7:39 p.m.•6 views

CLEANSTART-2025-JL64950 Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service

Security vulnerability affects the containerd package. Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service...

9.8CVSS7.7AI score0.83433EPSS

SaveExploits1References3

osv_cleanstart•added 2026/09/30 7:21 p.m.•8 views

CLEANSTART-2026-RQ84574 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Security vulnerability affects the buildkitd package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...

9.1CVSS7AI score0.00826EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by