25932 matches found
CVE-2026-71469
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...
CVE-2026-19014
A flaw was found in Consul. A remote attacker could exploit an uncontrolled resource consumption vulnerability in the Connect authorization endpoint. This flaw allows a caller to continuously grow the agent's intention-match cache, bypassing configured cache limits. The primary consequence is a...
undici: undici: Cross-user cookie disclosure via Set-Cookie caching
A flaw was found in undici. The software's caching mechanism, when operating in shared cache mode, improperly stores responses that include 'Set-Cookie' headers. This oversight allows an untrusted server to inject cookies into cached responses. Consequently, sensitive cookie information from one...
undici: undici: Integrity failure due to caching of unsafe HTTP method responses
A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without...
undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation
A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure a...
next: Next.js: Information disclosure via server-side fetch cache
A flaw was found in Next.js. A remote attacker could exploit a vulnerability in the server-side fetch mechanism, where a request with a body might receive a cached response intended for a different request to the same URL but different body. This could lead to the unauthorized disclosure of...
next.js: Next.js: Denial of Service via crafted POST requests to server actions
A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open,...
io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records
A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...
CVE-2026-69106
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...
CVE-2026-69106 Potential cache poisoning in JFrog Artifactory
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...
EUVD-2026-57389
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...
CVE-2026-69106
The CVE-2026-69106 entry concerns JFrog Artifactory (self-managed releases). A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content. The NVD/CVE records confirm this as a high-severity issue (CVSS v3.1 base ...
CVE-2026-69106 Potential cache poisoning in JFrog Artifactory
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...
K000162895: Spring Framework CookieRequestCache vulnerability CVE-2026-41706
Security Advisory Description Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login. In affected versions, the full absolute URL is...
CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
EUVD-2026-57261
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...
CVE-2026-69105
CVE-2026-69105 describes an unauthenticated issue affecting JFrog Artifactory where, under specific conditions, untrusted package content can be cached, potentially compromising artifact integrity and availability. The connected sources (NVD, CVE List) reiterate that an unauthenticated attacker c...
CVE-2026-69105 Potential package cache integrity issue in JFrog Artifactory
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...