CVE-2026-67355

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-67355

CVE-2026-67355 affects guzzlehttp/guzzle versions before 7.15.1. The issue is that host-only cookie scope is not preserved; the request host is stored in the Domain field instead of marking cookies as host-only. As a result, attackers controlling child hosts could receive host-only cookies intend...

CVE-2026-67355 guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-67355 guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-67355 guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

EUVD-2026-51845

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-68770

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

CVE-2026-68770

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

CVE-2026-68770 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

CVE-2026-68770 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

EUVD-2026-51650

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

CVE-2026-68770

The CVE affects the sentence-transformers library, where a logic flaw in the import_module_class helper (sentence_transformers/util/misc.py) adds an incorrect guard: os.path.exists(model_name_or_path) causes the trust_remote_code gate to pass whenever the provided path exists locally. This enable...

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service DoS attacks and even session hijacking, allowing an attacker to seize control of a user's network session. The findin...

JetBrains PhpStorm < 2026.2 Multiple Vulnerabilities

According to its self-reported version, the JetBrains PhpStorm installation on the remote host is prior to 2026.2. It is, therefore, affected by a multiple vulnerabilities. - In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project toolin...

PT-2026-66862

Name of the Vulnerable Software and Affected Versions sentence-transformers affected versions not specified Description A security control bypass exists due to a logic flaw in the import module class helper within sentence transformers/util/misc.py. The guard condition includes an or...

SUSE CVE-2026-54069

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server unconditionally trusts all chrome-extension:// origins, granting RoleAdministrator access to every installed browser extension without any authentication. Combined with the default empt...

SUSE CVE-2026-55430

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the workspace app proxy resolves the target app from httpapi.RequestHost which prefers the X-Forwarded-Host header over the real Host header. No middleware...

CLEANSTART-2026-QR62017 Security fixes in trust-manager-fips 0.21.1-r0

Package trust-manager-fips version 0.21.1-r0 fixes 7 vulnerabilities: CVE-2025-61730, CVE-2026-27142, CVE-2026-27139, CVE-2025-61726, CVE-2025-61728...

CLEANSTART-2026-FP29805 Security fixes in trust-manager 0.20.3-r1

Package trust-manager version 0.20.3-r1 fixes 1 vulnerabilities: ghsa-mpwr-8vm7-h73f...

CLEANSTART-2026-OH83140 Security fixes in trust-manager-fips 0.20.3-r0

Package trust-manager-fips version 0.20.3-r0 fixes 6 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2025-61730, CVE-2025-61726...