PT-2026-7137

Name of the Vulnerable Software and Affected Versions Litestar versions prior to 2.20.0 Description Litestar is an Asynchronous Server Gateway Interface ASGI framework. When the FileStore is used as a response-cache backend, an unauthenticated remote attacker can trigger cache key collisions via...

PowerDNS Recursor（pdns_recursor） 安全漏洞

PowerDNS Recursor pdnsrecursor is a domain name resolution server developed by the Dutch company PowerDNS. PowerDNS Recursor has security vulnerabilities; these vulnerabilities stem from custom zones, which may lead to increased resource usage, and custom CNAME chains, which may cause cache...

Rethinking Latency Denial-Of-Service: Attacking the LLM Serving Framework, Not the Model

Large Language Models face an emerging and critical threat known as latency attacks. Because LLM inference is inherently expensive, even modest slowdowns can translate into substantial operating costs and severe availability risks. Recently, a growing body of research has focused on algorithmic...

PT-2026-56438

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 Description A heap-buffer-overflow read occurs in the GetPixelIndex function. This issue is caused by OpenPixelCache updating image channel metadata before the pixel cache memory is allocated. An attacker...

client-certificate-auth Vulnerable to Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect

Summary Versions 0.2.1 and 0.3.0 of client-certificate-auth contain an open redirect vulnerability. The middleware unconditionally redirects HTTP requests to HTTPS using the unvalidated Host header, allowing an attacker to redirect users to arbitrary domains. Vulnerable Code javascript //...

Malicious code in @opposhop/nuxt-ssr-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0f25d8b1dc2ba6e9d88aed207e0f43239c33f2a39958e0bfc7d641c28c2ab5 The package @opposhop/nuxt-ssr-cache was found to contain malicious code. Source: ghsa-malware...

MAL-2026-795 Malicious code in @opposhop/nuxt-ssr-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0f25d8b1dc2ba6e9d88aed207e0f43239c33f2a39958e0bfc7d641c28c2ab5 The package @opposhop/nuxt-ssr-cache was found to contain malicious code. Source: ghsa-malware...

OESA-2026-1306 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Fix sharedcpumap to handle shared caches at different levels The cacheinfo sets up the sharedcpumap by checking whether the caches with the same index...

BIT-MASTODON-2026-25540 Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`)

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

CVE-2026-25540

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

CVE-2024-51451

IBM Concert 1.0.0 through 2.1.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking...

The vulnerability of the `flush_cache_all_local()` function in the `arch/parisc/include/asm/cacheflush.h` module, which is part of the PA-RISC architecture support for the Linux operating system, allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the flushcachealllocal function in the arch/parisc/include/asm/cacheflush.h header file, which is part of the PA-RISC architecture support for the Linux operating system, is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerabilit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dhcp (UTSA-2026-005266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005266 advisory. Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects...

webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence

Summary When experiments.buildHttp is enabled, webpack’s HTTPS resolver HttpUriPlugin enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to...

SUSE-SU-2026:20232-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: Update to version 3.5.0: Security issues fixed: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global bsc1257329. - CVE-2025-12816: interpretation conflict...

EUVD-2024-55396

IBM Concert 1.0.0 through 2.1.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking...

The vulnerability of the btrackerdestroy() function in the drivers/md/dm-cache-background-tracker.c module of the Linux operating system’s device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the btrackerdestroy function in the drivers/md/dm-cache-background-tracker.c module of the Linux device driver for multiple devices such as RAID and LVM is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260205-73-0026

A vulnerability in the drivers/md/dm-cache-target.c component of the Linux operating system kernel is related to memory initialization errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-25540

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

CVE-2026-25518

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. In versions from 1.18.0 to before 1.18.5 and from 1.19.0 to before 1.19.3, the cert-manager-controller performs DNS...