CVE-2026-46685

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, when RUSTFSCORSALLOWEDORIGINS is unset, the RustFS S3 listener's ConditionalCorsLayer reflects any request Origin value back as Access-Control-Allow-Origin and also sets Access-Control-Allow-Credentials: true and...

[SECURITY] Fedora 44 Update: rust-ambient-id-0.0.11-1.fc44

Detects ambient OIDC credentials in a variety of environments...