The vulnerability of the HTTP response processing flow application interface of the Python library Urllib3 allows a attacker to cause a service failure.

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2026-41577

authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, the SAML source response processor ResponseProcessor.parse does not validate the Conditions element on assertions. NotBefore, NotOnOrAfter, and AudienceRestriction are all ignored. This allows replay of expir...

EUVD-2021-12130

Malware in sbrugna...

SUSE CVE-2021-25219

In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response...

PT-2021-6075 · Isc +12 · Bind +12

Name of the Vulnerable Software and Affected Versions: BIND versions 9.3.0 through 9.11.35 BIND versions 9.12.0 through 9.16.21 BIND Supported Preview Edition versions 9.9.3-S1 through 9.11.35-S1 BIND Supported Preview Edition versions 9.16.8-S1 through 9.16.21-S1 BIND 9.17 development branch...

UBUNTU-CVE-2021-25219

In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response...