starlette-host-header-lab

Starlette Host-Header URL Confusion Lab X41-2026-002 A self-contained, containerized training lab reproducing the Starlette authentication-bypass vulnerability disclosed by X41 D-Sec. Advisory: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — Interpretation Conflict / Untrusted Input in Function...

CLEANSTART-2026-HJ86619 interpretation-conflict (CWE-436) vulnerability in node-forge versions 1

Security vulnerability affects the argo-workflows package. An interpretation-conflict CWE-436 vulnerability in node-forge versions 1...

CLEANSTART-2026-FP78218 interpretation-conflict (CWE-436) vulnerability in node-forge versions 1

Security vulnerability affects the argo-workflows package. An interpretation-conflict CWE-436 vulnerability in node-forge versions 1...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in fast-uri (CVE-2026-16221)

Summary A URI authority parsing vulnerability CVE-2026-16221 in the fast-uri package used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.1.5 on both Linux and Windows operating systems in FP-15. Vulnerability Details CVEID:CVE-2026-16221...

CVE-2026-116265: Interpretation Conflict

MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations. The boundary ambiguity checks look only at a plain boundary= parameter, and a boundary split into RFC 2231 sections boundary0=, boundary1= and so on is joined after...

CVE-2026-116266: Interpretation Conflict

MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous. The multipartboundary method decodes RFC 2047 encoded words anywhere in the boundary, but the ambiguity check only fires when the whole value is one encoded wor...

CVE-2026-116269: Interpretation Conflict

MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filename. A parameter such as filename=utf-8'en-US'payload.exe is converted to an encoded word with the language tag appended to the charset. The decoder strips...

Interpretation Conflict

Overview @fastify/express is an Express compatibility layer for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via the normalizeUrl function in index.js when the non-default ignoreDuplicateSlashes option is enabled. When an absolute-form request target e.g...

CVE-2026-116695: Interpretation Conflict

Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing parenthesis after an escaped backslash as escaped while consuming the remnants of a bad URL. Crass therefore keeps declarations, style rules, or at-rules insi...

BenoitC Hackney processing logic error vulnerability

Versions 4.0.1 through 4.9.0 of benoitc hackney contain a security vulnerability. This vulnerability arises from an interpretation conflict in hackneyurl’s handling of percent-encoded parentheses or trailing dots within IPv6 literals. The IP literal check passes the decoded value directly to...

Interpretation Conflict

Overview adm-zip is a JavaScript implementation for zip data compression for NodeJS. Affected versions of this package are vulnerable to Interpretation Conflict via canonically equivalent ZIP entry names e.g., ./hello.txt and hello.txt, which causes readEntries to treat them as distinct entries...

Interpretation Conflict

Overview org.webjars.npm:adm-zip is a JavaScript implementation for zip data compression for NodeJS. Affected versions of this package are vulnerable to Interpretation Conflict via canonically equivalent ZIP entry names e.g., ./hello.txt and hello.txt, which causes readEntries to treat them as...

Interpretation Conflict

Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict via the address parser in src/addressparser/index.ts when processing email header values containing nested comments. RFC...

Interpretation Conflict

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict via the address parser in src/addressparser/index.ts when processing email header values containing nested comments. RFC 5322 §3.2.2...

Interpretation Conflict

Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict via the address parser in src/addressparser/index.ts, where the tokenizer tracks only a single open operator and does no...

Interpretation Conflict

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict via the address parser in src/addressparser/index.ts, where the tokenizer tracks only a single open operator and does not account for...

Interpretation Conflict

Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict via the address parser src/addressparser/index.ts when processing angle-addr and group constructs. The tokenizer tracks...

Interpretation Conflict

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict via the address parser src/addressparser/index.ts when processing angle-addr and group constructs. The tokenizer tracks only a single op...

Interpretation Conflict

Overview @fastify/middie is a Middleware engine for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via incorrect prefix-path joining in the use function, where middleware mount paths are concatenated with the Fastify route prefix using a logic that diverges fr...

CVE-2026-110682: Interpretation Conflict

Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incrparse. allownonref is enabled by default and incrparse inherits it. A top-level number, true, false or null has no closing delimiter, so the incremental parser decodes...