5698 matches found
DEBIAN-CVE-2026-67318
axios versions =1.13.0 Node.js HTTP adapter fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2 request API does not honor the maxBodyLength option and axios's byte-counting stream wrapper is gated on...
DEBIAN-CVE-2026-67303
FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...
DEBIAN-CVE-2026-66402
FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...
DEBIAN-CVE-2026-67314
axios versions =1.15.2 and 1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling lib/adapters/http.js and lib/helpers/resolveConfig.js. When an application is already affected by a separate prototype-pollution primitive and makes an axios request with an own auth...
DEBIAN-CVE-2026-67339
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...
MINI-GHPC-VPFC-Q4HC
Bulletin has no description...
MINI-63QR-2GPM-CC5G
Bulletin has no description...
RHSA-2026:48780 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
DEBIAN-CVE-2026-9672
Bulletin has no description...
DEBIAN-CVE-2026-58039
A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and 26...
ECHO-069B-5ADD-3223
Bulletin has no description...
CGA-M5F3-RPRP-R6WX
Bulletin has no description...
MINI-958M-QRMF-3R3F
Bulletin has no description...
MINI-5FWC-487V-279M
Bulletin has no description...
RHSA-2026:48032 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
RHSA-2026:47981 Red Hat Security Advisory: kpatch-patch security update
Bulletin has no description...
RHSA-2026:47755 Red Hat Security Advisory: openssh security update
Bulletin has no description...
RHSA-2026:47736 Red Hat Security Advisory: fence-agents security update
Bulletin has no description...