CVE-2026-82209

CVE-2026-82209 affects libcurl when built with libpsl support (the default in most distribution packages). When a Set-Cookie header's Domain attribute exactly matches an origin host that is itself a public suffix (e.g., co.uk or github.io), parse_domain() in lib/cookie.c unconditionally sets tail...

PT-2026-2934

Name of the Vulnerable Software and Affected Versions Outray versions prior to 0.1.5 Description A flaw exists in Outray that allows a user, even those on a free plan, to obtain more subdomains than permitted due to missing database transaction locks. Specifically, the issue resides in the API...