AZL-99129 CVE-2026-78662 affecting package cri-o 1.30.1-1

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99285 CVE-2026-78662 affecting package moby-engine 25.0.3-20

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99165 CVE-2026-78662 affecting package cf-cli for versions less than 8.7.11-9

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

CVE-2026-78662 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

ROS-20260727-73-0018

A vulnerability in Gitea related to insufficient validation of incoming requests. Exploitation of this vulnerability could allow a remote attacker to carry out an SSRF attack...

Adobe Experience Manager SSRF

The vulnerability of the Adobe Media Encoder application relates to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

ColdFusion Insufficient Validation File Read

The vulnerability of the ColdFusion software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

ROS-20260624-73-0040

The vulnerability in curl is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...

RoundCube Webmail Auth Bypass Information Disclosure

The vulnerability of the RoundCube Webmail email client is related to the lack of validation during the processing of incoming requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information or bypass existing security mechanisms...

RoundCube Webmail Auth Bypass Information Disclosure

The vulnerability of the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information or enhance their privileges...

ROS-20260526-73-0014

Vulnerability in registry related to insufficient validation of incoming requests. Exploitation of the vulnerability could allow a remote attacker to launch an ssrf attack...

Corporate file sharing SSRF

The vulnerability of the MFlash secure messaging platform is related to insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

RoundCube Webmail Input Validation

The vulnerability of the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

RoundCube Webmail Disclosure

The vulnerability of the RoundCube Webmail client lies in the lack of validation for incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

SAP Human Capital Management Unauthorized Access

The vulnerability of software for managing human capital resources in the SAP Human Capital Management HCM system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

Kubernetes Cluster SSRF

The vulnerability of the Kubernetes cluster management software is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...

Gitea Response Inconsistency Data Compromise

The vulnerability of the Git repository management system Gitea is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the information being protected...

ROS-20260216-73-0013

Vulnerability in kubernetes related to insufficient validation of incoming requests. Exploitation of the vulnerability could allow an attacker acting remotely to launch an ssrf attack...

SUSE-SU-2026:20090-1 Security update for cpp-httplib

This update for cpp-httplib fixes the following issues: - CVE-2025-66570: IP spoofing, log poisoning, and authorization bypass via header shadowing due to acceptance and parsing of client-controlled injected HTTP headers in incoming requests bsc1254734. - CVE-2025-66577: access and error log...