next: Next.js: Information disclosure via server-side fetch cache

A flaw was found in Next.js. A remote attacker could exploit a vulnerability in the server-side fetch mechanism, where a request with a body might receive a cached response intended for a different request to the same URL but different body. This could lead to the unauthorized disclosure of...

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...

CVE-2026-69106

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...

CVE-2026-69106 Potential cache poisoning in JFrog Artifactory

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...

CVE-2026-69106

The CVE-2026-69106 entry concerns JFrog Artifactory (self-managed releases). A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content. The NVD/CVE records confirm this as a high-severity issue (CVSS v3.1 base ...

CVE-2026-69106 Potential cache poisoning in JFrog Artifactory

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...

EUVD-2026-57389

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content...

K000162895: Spring Framework CookieRequestCache vulnerability CVE-2026-41706

Security Advisory Description Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login. In affected versions, the full absolute URL is...

CVE-2026-66384

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

EUVD-2026-57261

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...

CVE-2026-69105 Potential package cache integrity issue in JFrog Artifactory

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...

CVE-2026-69105

CVE-2026-69105 describes an unauthenticated issue affecting JFrog Artifactory where, under specific conditions, untrusted package content can be cached, potentially compromising artifact integrity and availability. The connected sources (NVD, CVE List) reiterate that an unauthenticated attacker c...

CVE-2026-69105 Potential package cache integrity issue in JFrog Artifactory

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...

CVE-2026-68760

An unauthenticated user may bypass authentication under specific cache conditions...

CVE-2026-66381

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...

CVE-2026-66384

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

CVE-2026-66384

JFrog Artifactory is affected by an improper limitation of a pathname to a restricted directory , allowing an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. The vulnerability carries a CVSS score of 5.3 (MEDIUM) with high integ...

EUVD-2026-57256

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...