MAL-2026-17723 Malicious code in @galicia-toolkit-nestjs/paas (npm)

@galicia-toolkit-nestjs/paas is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim...

CVE-2026-107839: Uncontrolled Resource Consumption

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

Splunk Enterprise 10.0.0 < 10.0.10, 10.2.0 < 10.2.7, 10.4.0 < 10.4.3 (SVD-2026-1001)

The version of Splunk Enterprise installed on the remote host is 10.0.x prior to 10.0.10, 10.2.x prior to 10.2.7, or 10.4.x prior to 10.4.3. Splunk Enterprise 9.4.x is not affected. It is, therefore, affected by multiple vulnerabilities as referenced in the SVD-2026-1001 advisory, including: - A...

PT-2026-117187

Security vulnerability affects the cloud-provider-aws package. This issue is resolved in later releases. See references for vulnerability details...

Spring Cloud Gateway 3.1.0 Actuator Code Injection

Spring Cloud Gateway version 3.1.0 with an exposed, unauthenticated Gateway Actuator endpoint contains a code injection vulnerability. The included proof of concept demonstrates adding a route filter whose SpEL expression is evaluated when the gateway is refreshed...

Malicious code in @galicia-toolkit-nestjs/paas (npm)

@galicia-toolkit-nestjs/paas is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim...

Spring Cloud Function 3.2.2 SpEL Injection

Spring Cloud Function version 3.2.2 evaluates the spring.cloud.function.routing-expression request header as a SpEL expression. The supplied proof of concept demonstrates target-side command execution. https://packetstorm.news/download/234973...

PT-2026-109285

Name of the Vulnerable Software and Affected Versions ageLANServer versions prior to 1.15.2 Description The bundled game server in ageLANServer contains a remote denial-of-service issue. The POST /game/cloud/getFileURL endpoint fails to limit the request body size or the number of elements in the...

CVE-2026-107289

A flaw was found in pydantic-ai. This vulnerability can lead to information disclosure, potentially exposing sensitive cloud credentials such as Identity and Access Management IAM tokens. In configurations where local network access is permitted for untrusted requests, a remote attacker can bypas...

AZL-107222 CVE-2026-97032 affecting package cloud-provider-kubevirt 0.5.1-9

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107622 CVE-2026-97032 affecting package kube-vip-cloud-provider 0.0.10-10

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107213 CVE-2026-78669 affecting package cloud-provider-kubevirt 0.5.1-9

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107631 CVE-2026-78669 affecting package kube-vip-cloud-provider 0.0.10-10

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107628 CVE-2026-78663 affecting package kube-vip-cloud-provider 0.0.10-10

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107219 CVE-2026-78663 affecting package cloud-provider-kubevirt 0.5.1-9

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107619 CVE-2026-78659 affecting package kube-vip-cloud-provider 0.0.10-10

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107216 CVE-2026-78659 affecting package cloud-provider-kubevirt 0.5.1-9

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107225 CVE-2026-78660 affecting package cloud-provider-kubevirt 0.5.1-9

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107625 CVE-2026-78660 affecting package kube-vip-cloud-provider 0.0.10-10

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

com.hazelcast:hazelcast-client (3.0-rc1), com.hazelcast:hazelcast-cloud (3.0-rc1) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.0-rc1)

com.hazelcast:hazelcast MAVEN version 3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0-rc1 - com.hazelcast:hazelcast-cloud 3.0-rc1 -...