ROOT-APP-MAVEN-CVE-2026-107231 CVE-2026-107231 in org.asynchttpclient:async-http-client - Patched by Root

Root has patched CVE-2026-107231 in the org.asynchttpclient:async-http-client package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-107227 CVE-2026-107227 in org.asynchttpclient:async-http-client - Patched by Root

Root has patched CVE-2026-107227 in the org.asynchttpclient:async-http-client package for Root:Maven. Multiple fixed versions available...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

CLEANSTART-2026-LB99880 undici is an HTTP client library for Node

Security vulnerability affects the npm package. undici is an HTTP client library for Node...

CLEANSTART-2026-ME95342 undici is an HTTP client library for Node

Security vulnerability affects the npm package. undici is an HTTP client library for Node...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143714 advisory. The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to...

Debian dsa-6580 : erlang - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6580 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6580-1 [email protected] https://www.debian.org/securit...

CLEANSTART-2026-GI85240 urllib3 is an HTTP client library for Python

CVE-2026-97687 affects multiple packages. urllib3 is an HTTP client library for Python. See references for individual vulnerability details...

Exposure Of Sensitive Information

A2A Java SDK is vulnerable to Exposure of Sensitive Information. The vulnerability is due to improper redirect handling in the Android HTTP client's synchronous POST requests, which allows an attacker controlling a redirected destination to obtain configured API keys or authentication tokens...

CVE-2026-111769

In affected versions, the SDK's HTTP client transports and OAuth requests followed redirects to any origin. If an MCP server or authorization server redirected a request to another origin, that origin received custom request headers such as an "X-API-Key" set in "requestInit.headers" and the...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.8), ai.covia:covia-discord (>=0.9.4, <=0.9.8) +109 more potentially affected by CVE-2026-111763 via org.a2aproject.sdk:a2a-java-sdk-http-client (>=1.0.0.alpha4, <=1.2.0.final)

org.a2aproject.sdk:a2a-java-sdk-http-client MAVEN version =1.0.0.alpha4, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.1.0, =0.2.1.2-alpha, =0.6.0, =0.1.0, =0.1.0, =0.1.1, =0.1.2 and more Source cves: CVE-2026-111763 Source advisory: MEND:CVE-2026-111763...

CVE-2026-48932

A flaw was found in the Node.js HTTP client. This vulnerability can cause a request desynchronization in Node.js-based forwarding proxies. A remote attacker could exploit this by sending crafted HTTP requests where the Node.js client omits certain headers from being visible to the proxy, while...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via the configureOptions method in the Knative HTTP client. An attacker on the network path can impersonate the server and read TLS traffic by intercepting connections when SSL is enabled without a...

USN-8936-1 php8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilities

It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04...

USN-8936-1: PHP vulnerabilities

It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04...

CVE-2026-112103

A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function curl of the file web.php of the component HTTP Client. Such manipulation leads to improper certificate validation. The attack may be performed from remote. Attacks of this nature are...

CVE-2026-112103 f3-factory fatfree-core HTTP Client web.php _curl certificate validation

A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function curl of the file web.php of the component HTTP Client. Such manipulation leads to improper certificate validation. The attack may be performed from remote. Attacks of this nature are...

CVE-2026-112103

A vulnerability exists in f3-factory fatfree-core up to version 3.9.2 within the HTTP Client component. Specifically, the _curl function in the web.php file is susceptible to improper certificate validation . While the attack can be performed remotely, it is noted as highly complex with difficult...

EUVD-2026-104225

A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function curl of the file web.php of the component HTTP Client. Such manipulation leads to improper certificate validation. The attack may be performed from remote. Attacks of this nature are...

CVE-2026-112103 f3-factory fatfree-core HTTP Client web.php _curl certificate validation

A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function curl of the file web.php of the component HTTP Client. Such manipulation leads to improper certificate validation. The attack may be performed from remote. Attacks of this nature are...