10571 matches found
GHSA-4CHG-4752-W88R NukeViet: Pre-authentication SSRF via X-Forwarded-Host
Summary An unauthenticated attacker can coerce the server into issuing HTTP requests to an attacker-chosen host by spoofing the X Forwarded-Host and X-Forwarded-Proto request headers. The forwarded host is used, without validation, to build the URL that serverinfoupdate fetches with cURL, resulti...
Security update for curl
This update for curl fixes the following issues CVE-2026-4873: connection reuse ignores TLS requirement bsc1262631. CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. CVE-2026-8458: wrong reuse for different services bsc1268407. CVE-2026-8924: traling dot domain super cookie bsc1268409...
PYSEC-2026-3431 yt-dlp: File Downloader cookie leak with curl
Summary If curl is used an external downloader for yt-dlp, cookies may be leaked to an unintended host upon HTTP redirect or when the host for download fragments differs from their parent manifest's. This is the equivalent to GHSA-v8mc-9377-rwjj for the curl downloader. The vulnerable behavior is...
ROOT-OS-DEBIAN-13-CVE-2026-9080 CVE-2026-9080 in rootio-curl - Patched by Root
Root has patched CVE-2026-9080 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-9545 CVE-2026-9545 in rootio-curl - Patched by Root
Root has patched CVE-2026-9545 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-12064 CVE-2026-12064 in rootio-curl - Patched by Root
Root has patched CVE-2026-12064 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-15079 CVE-2025-15079 in rootio-curl - Patched by Root
Root has patched CVE-2025-15079 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-8932 CVE-2026-8932 in rootio-curl - Patched by Root
Root has patched CVE-2026-8932 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-8286 CVE-2026-8286 in rootio-curl - Patched by Root
Root has patched CVE-2026-8286 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-14017 CVE-2025-14017 in rootio-curl - Patched by Root
Root has patched CVE-2025-14017 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-10966 CVE-2025-10966 in rootio-curl - Patched by Root
Root has patched CVE-2025-10966 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-9547 CVE-2026-9547 in rootio-curl - Patched by Root
Root has patched CVE-2026-9547 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...
CakePHP 5.3.7 Released
CakePHP 5.3.7 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 5.3.5. This is a maintenance release for the 5.3 branch that fixes community reported issues and three security issues. Advisories will be published for the issues over the next week as...
CVE-2026-8932 affecting package curl for versions less than 8.11.1-10
CVE-2026-8932 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-9079 affecting package curl for versions less than 8.11.1-10
CVE-2026-9079 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-8458 affecting package curl for versions less than 8.11.1-10
CVE-2026-8458 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...