91732 matches found
CVE-2026-71575 Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter
The maxage authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity. Any relying party using setMaxAgeOffset to enforce re-authentication would silently accept sessions of any age, bypassing step-...
CVE-2026-56154
A use-after-free flaw was found in the modrewrite module of Apache HTTP Server when evaluating URL lookahead expressions that reference HTTP request headers, such as %LA-U:HTTP:.... A remote attacker may be able to trigger invalid memory access in a server using an affected rewrite configuration,...
CVE-2026-57941
A flaw was found in the modhttp2 module of Apache HTTP Server. A remote, unauthenticated attacker could exploit a use-after-free condition—where memory is accessed after being released—through re-entrant processing of shared session buffers. This flaw can allow an attacker to potentially execute...
CVE-2026-106449 vulnerabilities
Vulnerabilities for packages: logstash, spark, cassandra, apache-pulsar, sonarqube, strimzi-kafka-operator, akhq, thingsboard, kafka, wildfly, cassandra-reaper, druid, trino, opensearch...
CVE-2026-106450 vulnerabilities
Vulnerabilities for packages: logstash, spark, cassandra, apache-pulsar, sonarqube, strimzi-kafka-operator, akhq, thingsboard, kafka, wildfly, cassandra-reaper, druid, trino, opensearch...
GHSA-343H-94H5-C4WR vulnerabilities
Vulnerabilities for packages: logstash, spark, cassandra, apache-pulsar, sonarqube, strimzi-kafka-operator, akhq, thingsboard, kafka, wildfly, cassandra-reaper, druid, trino, opensearch...
CVE-2026-106453 vulnerabilities
Vulnerabilities for packages: logstash, spark, cassandra, apache-pulsar, sonarqube, strimzi-kafka-operator, akhq, thingsboard, kafka, cassandra-reaper, druid, trino, wildfly...
GHSA-6CX8-RJF8-PR8G vulnerabilities
Vulnerabilities for packages: logstash, spark, cassandra, apache-pulsar, sonarqube, strimzi-kafka-operator, akhq, thingsboard, kafka, cassandra-reaper, druid, trino, wildfly...
GHSA-GM45-99XC-R7WV vulnerabilities
Vulnerabilities for packages: logstash, spark, cassandra, apache-pulsar, sonarqube, strimzi-kafka-operator, akhq, thingsboard, kafka, wildfly, cassandra-reaper, druid, trino, opensearch...
CLEANSTART-2026-XO55123 maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A maliciously constructed HTTP/2 request could cause modhttp2 in Apache HTTP Server 2...
CLEANSTART-2026-IK18722 specially crafted request could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted request could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-PP80959 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-GY12147 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-MQ00302 specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-TY04609 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-RR06957 When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2...
CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's
Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...
CLEANSTART-2026-XV82454 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...