48566 matches found
CVE-2026-74894
The PHP package openssl_encrypt before version 1.4.0 has a broken verify_api_token function that accepts any non-empty Bearer token, allowing unauthenticated attackers to upload arbitrary public keys, enumerate all keys, and revoke any user's keys. CVSS 9.8 Critical. Upgrade to 1.4.0. No in-the-w...
CVE-2026-74882 openssl_encrypt before 1.4.0 Insecure Default Configuration
opensslencrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 1918 private address space in IntegrityProxyConfig trustedproxies. Attackers on private networks can forge client certificate headers to bypass mTLS authentication when ProxyAuth validation i...
CVE-2026-74882
opensslencrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 1918 private address space in IntegrityProxyConfig trustedproxies. Attackers on private networks can forge client certificate headers to bypass mTLS authentication when ProxyAuth validation i...
Signature Bypass
Apache CXF is vulnerable to signature Bypass. The vulnerability is due to insufficient verification of metadata signatures, where the JwsJsonContainerRequestFilter processes metadata without confirming it was authenticated by the accepted signature, and attackers can supply unauthenticated...
BIT-NODE-MIN-2026-58044
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...
BIT-NODE-2026-58044
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...
BIT-OPENBAO-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...
K000162941: NodeJS vulnerability CVE-2026-58044
Security Advisory Description A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers...
CVE-2026-12630: Out-of-bounds Read
Zephyr's 6LoWPAN IP Header Compression IPHC uncompression code contains an out-of-bounds read in getihpcinlinedsize subsys/net/ip/6lo.c. The destination inline size is looked up in dainlinesizetable, which has 13 entries, using an index built from the M, DAC and DAM bits of the received IPHC...
PT-2026-76774
An issue in ACME mini httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle request function...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100587)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100587 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6datagramrecvspecificctl builds...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-003181)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003181 advisory. Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header...
Important: nodejs22
Issue Overview: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding '' brace groups. An attacker who passes a crafted string to expand, directly or transitively, can cause significant...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100190)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100190 advisory. In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skbcow in iptunnelpmtudbuildicmpv6 Sashiko found that...
CVE-2026-68005: Uncontrolled Resource Consumption
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
EUVD-2026-60449
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
CVE-2026-71424: Exposure of Sensitive Information to an Unauthorized Actor
Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/personaid endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.settokens and OnyxTokenStorage.setclientinfo in...
PT-2026-73412
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...
