138608 matches found
Rocky Linux 8 [CIQ] Security Update: oci-systemd-hook / oci-systemd-hook-debuginfo / etc Multiple Vulnerabilities (crlsa-2019_4269)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20194269 advisory. HTTP/2: flood using PING frames results in unbounded memory growth CVE-2019-9512 HTTP/2: flood using HEADERS frames results in unbounded memory growth...
AlmaLinux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.6:CLSA-2026:1774859936)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774859936 advisory. - Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constrain...
GHSA-4MH8-R7RC-XPVC fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses
Impact fastify crashes with an uncaught ERRHTTP2INVALIDCONNECTIONHEADERS exception when a route that registers a response trailer via reply.trailer is served over HTTP/2. Fastify unconditionally adds the Transfer-Encoding: chunked header when a trailer is set, which is forbidden on HTTP/2, so...
EUVD-2026-80315
fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses...
fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses
Impact fastify crashes with an uncaught ERRHTTP2INVALIDCONNECTIONHEADERS exception when a route that registers a response trailer via reply.trailer is served over HTTP/2. Fastify unconditionally adds the Transfer-Encoding: chunked header when a trailer is set, which is forbidden on HTTP/2, so...
NPM: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses
NPM: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses vulnerability discovered by ? in WordPress Npm fastify versions 5.12.5...
CVE-2026-49265 vulnerabilities
Vulnerabilities for packages: keep-fips, dagster, kserve, az, dbt-bigquery, mlrun, openstack-keystone-2026.1, chroma, kubeflow-pipelines, mcp-atlassian, openstack-keystone-2025.1-fips, azureml-inference-server-http, pgadmin4-fips, kserve-xgbserver, kubeflow-pipelines-visualization-server, ggshiel...
GHSA-HJ66-6F7G-4R5V vulnerabilities
Vulnerabilities for packages: keep-fips, dagster, kserve, az, dbt-bigquery, mlrun, openstack-keystone-2026.1, chroma, kubeflow-pipelines, mcp-atlassian, openstack-keystone-2025.1-fips, azureml-inference-server-http, pgadmin4-fips, kserve-xgbserver, kubeflow-pipelines-visualization-server, ggshiel...
GHSA-W2CX-738M-MC7W vulnerabilities
Vulnerabilities for packages: kserve, openstack-nova-2025.1, openstack-designate-2026.1, openstack-keystone-2026.1, openstack-manila-2026.1, openstack-keystone-2025.1-fips, mcp-atlassian, netbox-fips, azureml-inference-server-http, openstack-horizon-2026.1-fips, openstack-placement-2026.1,...
GHSA-HXM8-2XGR-2P9M vulnerabilities
Vulnerabilities for packages: kserve, openstack-nova-2025.1, openstack-designate-2026.1, openstack-keystone-2026.1, openstack-manila-2026.1, openstack-keystone-2025.1-fips, mcp-atlassian, netbox-fips, azureml-inference-server-http, openstack-horizon-2026.1-fips, openstack-placement-2026.1,...
CVE-2026-49264 vulnerabilities
Vulnerabilities for packages: keep-fips, dagster, kserve, az, dbt-bigquery, mlrun, openstack-keystone-2026.1, chroma, kubeflow-pipelines, mcp-atlassian, openstack-keystone-2025.1-fips, azureml-inference-server-http, pgadmin4-fips, kserve-xgbserver, kubeflow-pipelines-visualization-server, ggshiel...
GHSA-XPV3-W29H-X7CV vulnerabilities
Vulnerabilities for packages: keep-fips, dagster, kserve, az, dbt-bigquery, mlrun, openstack-keystone-2026.1, chroma, kubeflow-pipelines, mcp-atlassian, openstack-keystone-2025.1-fips, azureml-inference-server-http, pgadmin4-fips, kserve-xgbserver, kubeflow-pipelines-visualization-server, ggshiel...
GHSA-R6X4-923Q-G947 vulnerabilities
Vulnerabilities for packages: kserve, openstack-nova-2025.1, openstack-designate-2026.1, openstack-keystone-2026.1, openstack-manila-2026.1, openstack-keystone-2025.1-fips, mcp-atlassian, netbox-fips, azureml-inference-server-http, openstack-horizon-2026.1-fips, openstack-placement-2026.1,...
GHSA-W6J9-CWV2-H6WQ vulnerabilities
Vulnerabilities for packages: kserve, openstack-nova-2025.1, openstack-designate-2026.1, openstack-keystone-2026.1, openstack-manila-2026.1, openstack-keystone-2025.1-fips, mcp-atlassian, netbox-fips, azureml-inference-server-http, openstack-horizon-2026.1-fips, openstack-placement-2026.1,...
CVE-2026-102271 vulnerabilities
Vulnerabilities for packages: kserve, openstack-nova-2025.1, openstack-designate-2026.1, openstack-keystone-2026.1, openstack-manila-2026.1, openstack-keystone-2025.1-fips, mcp-atlassian, netbox-fips, azureml-inference-server-http, openstack-horizon-2026.1-fips, openstack-placement-2026.1,...
CVE-2026-102274 vulnerabilities
Vulnerabilities for packages: kserve, openstack-nova-2025.1, openstack-designate-2026.1, openstack-keystone-2026.1, openstack-manila-2026.1, openstack-keystone-2025.1-fips, mcp-atlassian, netbox-fips, azureml-inference-server-http, openstack-horizon-2026.1-fips, openstack-placement-2026.1,...
GHSA-2GX3-RCP4-G85Q vulnerabilities
Vulnerabilities for packages: kserve, openstack-nova-2025.1, openstack-designate-2026.1, openstack-keystone-2026.1, openstack-manila-2026.1, openstack-keystone-2025.1-fips, mcp-atlassian, netbox-fips, azureml-inference-server-http, openstack-horizon-2026.1-fips, openstack-placement-2026.1,...
GHSA-P4G4-X82P-Q773 vulnerabilities
Vulnerabilities for packages: kserve, openstack-nova-2025.1, openstack-designate-2026.1, openstack-keystone-2026.1, openstack-manila-2026.1, openstack-keystone-2025.1-fips, mcp-atlassian, netbox-fips, azureml-inference-server-http, openstack-horizon-2026.1-fips, openstack-placement-2026.1,...
CLEANSTART-2026-GF82267 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
CVE-2026-56853 affects multiple packages. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. See references for individual vulnerability details...
CLEANSTART-2026-TQ18292 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0
Security vulnerability affects the crane package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...