NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571

Summary The URL validation regex ^https?:/?/. added to emissary's NavAction.java allows protocol-relative URLs //evil.com/... and single-slash scheme variants http:/evil.com to bypass validation, enabling SSRF and open redirect attacks. Affected Package - Ecosystem: Maven - Package:...

CVE-2026-54442

Technical details for CVE-2026-54442 are not publicly available in the provided documents. The current entry is a reserved placeholder. Action: monitor for updates.

GHSA-C6Q7-WQW2-H65W NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571

Summary The URL validation regex ^https?:/?/. added to emissary's NavAction.java allows protocol-relative URLs //evil.com/... and single-slash scheme variants http:/evil.com to bypass validation, enabling SSRF and open redirect attacks. Affected Package - Ecosystem: Maven - Package:...

CVE-2026-63414 Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps

Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, token-exchange authenticated controllers can expose a request-derived shop context instead of the identity from a verified Shopify ID token or active Shopify session. currentshopifydomain can resolve to the...

CVE-2026-63414 Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps

Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, token-exchange authenticated controllers can expose a request-derived shop context instead of the identity from a verified Shopify ID token or active Shopify session. currentshopifydomain can resolve to the...

CVE-2026-63414

The Shopify App Rails engine (versions 22.1.0 through 23.0.3 ) contains a vulnerability where token-exchange authenticated controllers can expose a request-derived shop context. Specifically, the current_shopify_domain helper could resolve to a sanitized shop query parameter instead of the identi...

EUVD-2026-114553

Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, token-exchange authenticated controllers can expose a request-derived shop context instead of the identity from a verified Shopify ID token or active Shopify session. currentshopifydomain can resolve to the...

CVE-2026-63414

Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, "token-exchange" authenticated controllers can expose a request-derived "shop" context instead of the identity from a verified Shopify ID token or active Shopify session. "currentshopifydomain" can resolve ...

CVE-2026-63414 Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps

Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, token-exchange authenticated controllers can expose a request-derived shop context instead of the identity from a verified Shopify ID token or active Shopify session. currentshopifydomain can resolve to the...

pfsense-https-host-redirect

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-https-host-redirect pfsense-https-host-redirect Class: Open redirect Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org system.inc emits a port-80 server with return 301...

EUVD-2026-114552

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...

CVE-2026-63410 secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...

CVE-2026-63410 secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...

CVE-2026-63410

The secp256k1-native Ruby library contains a vulnerability where native constant-time scalar multiplication via Point#mul or scalar_multiply_ct can leak secret scalar information through timing side-channels. This occurs because certain compiler toolchains, specifically GCC 14.3.0, 15.1.0, and 15...

CVE-2026-63410

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through "Pointmul" or "scalarmultiplyct" can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection in...

CVE-2026-63410 secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...

copyfail

Copy Fail CVE-2026-31431 – Exploit Usage Guide Original Readme taken from @painoob All Kernel versions since 2017 / 2016 are vulnerable ! Kernel 7 is fully immune, others between 5-7 may still be vulnerable ⚠️ Disclaimer This content is for educational and authorized security testing purposes only...

CVE-2026-63400 Coop sessions are not invalidated on password reset

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, resetPasswordForToken updates the password row without invalidating database-backed sessions. An attacker who has acquired a password and established a session retains access even after the legitimate user resets the...

CVE-2026-63400 Coop sessions are not invalidated on password reset

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, resetPasswordForToken updates the password row without invalidating database-backed sessions. An attacker who has acquired a password and established a session retains access even after the legitimate user resets the...

CVE-2026-63400

The open-source review and moderation tool Coop by ROOST is vulnerable to insufficient session expiration. Prior to version 1.0.2 , the resetPasswordForToken function updates the password row but fails to invalidate existing database-backed sessions. This allows an attacker who has already establ...