CVE-2026-86818 fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 and 4.1.4, the mailto parser compares each query field name to the reserved names to, subject, and body while the name is still...

CVE-2026-86818 fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 and 4.1.4, the mailto parser compares each query field name to the reserved names to, subject, and body while the name is still...

EUVD-2026-78419

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth policies accept any non-empty Authorization header without...

CVE-2026-57134

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth policies accept any non-empty Authorization header without...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

gstreamer1-plugins-base security update

An update is available for gstreamer1-plugins-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

SUSE CVE-2026-90778

SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...

EUVD-2026-78158

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers...

CVE-2023-54397: Inconsistent Interpretation of HTTP Requests

Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain...

PT-2026-92380

Name of the Vulnerable Software and Affected Versions Http4s versions prior to 0.23.35 Http4s versions prior to 1.0.0-M47 Description The ResponseCookie.render function fails to neutralize semicolons or control characters when writing name, content, domain, path, and extension values. If an...

Fixed in Apache Tomcat 10.1.60

Low: WebSocket message smuggling with per-message-deflate CVE-2026-87022 Improper handling of length parameter allows WebSocket message smuggling when per-message-deflate is used. This was fixed with commit 567a8551. This issue was reported to the Tomcat security team on 7 September 2026. The iss...

CVE-2026-69211: Improper Neutralization of CRLF Sequences in HTTP Headers

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes attacker-influenced name, content, domain, path, and extension values without neutralizing semicolons or control characters. An application that constructs a ResponseCookie from unvalidated...

Fixed in Apache Tomcat 9.0.122

Low: WebSocket message smuggling with per-message-deflate CVE-2026-87022 Improper handling of length parameter allows WebSocket message smuggling when per-message-deflate is used. This was fixed with commit 959a52a2. This issue was reported to the Tomcat security team on 7 September 2026. The iss...

PT-2026-99160

Summary Nezha v2.2.3 regresses the GHSA-9rc6-8cjv-rcvx host header injection fix for deployments where the new dashboard host setting is empty. In that configuration, /api/v1/oauth2/provider again reflects the request Host header into the OAuth2 redirect uri sent to the identity provider, even if...

PT-2026-92126

Name of the Vulnerable Software and Affected Versions containers/storage library affected versions not specified Description A flaw in the containers/storage library allows a crafted tar archive containing a malicious whiteout header e.g. victim/.wh. to replace the extraction destination director...

PT-2026-92085

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description An unauthenticated server-side request forgery SSRF issue exists in the check site availability function. This occurs because the function accepts attacker-controlled HTTP Host headers. By sending...

Fixed in Apache Tomcat 11.0.26

Low: WebSocket message smuggling with per-message-deflate CVE-2026-87022 Improper handling of length parameter allows WebSocket message smuggling when per-message-deflate is used. This was fixed with commit 4fef25fe. This issue was reported to the Tomcat security team on 7 September 2026. The iss...