EUVD-2016-3191

Malware in sbrugna...

EUVD-2009-0837

Malware in sbrugna...

EUVD-2021-19407

Malware in sbrugna...

EUVD-2007-3151

Malware in sbrugna...

EUVD-2019-7855

Malware in sbrugna...

EUVD-2008-5071

Malware in sbrugna...

EUVD-2008-5398

Malware in sbrugna...

EUVD-2002-2407

Malware in sbrugna...

EUVD-2025-20100

Malicious code in bioql PyPI...

EUVD-2022-0825

Malicious code in bioql PyPI...

EUVD-2018-0526

Malicious code in bioql PyPI...

EUVD-2024-25156

Malicious code in bioql PyPI...

Denial Of Service (DoS)

github.com/versity/versitygw is vulnerable to Denial Of Service DoS. The vulnerability is due to sending AWS chunk data without a Content-Length HTTP header, which causes the server to panic and crash, allowing an attacker to repeatedly trigger service disruption...

CLSA-2025-1758294053 nodejs: Fix of CVE-2024-27982

CVE-2024-27982: prevent HTTP request smuggling by properly interpreting content-length header...

Hono has Body Limit Middleware Bypass

Summary A flaw in the bodyLimit middleware could allow bypassing the configured request body size limit when conflicting HTTP headers were present. Details The middleware previously prioritized the Content-Length header even when a Transfer-Encoding: chunked header was also included. According to...

CVE-2025-59139

CVE-2025-59139 affects the Hono web framework (pre-4.9.7). A flaw in the bodyLimit middleware allowed bypassing the configured request body size limit when conflicting headers were present, because Content-Length could be prioritized over Transfer-Encoding: chunked. The HTTP spec requires Transfe...

Hono 安全漏洞

Hono is a web framework written in TypeScript from the Hono community. A security vulnerability exists in Hono versions prior to 4.9.7, which stems from the bodyLimit middleware prioritizing the Content-Length header when handling conflicting HTTP headers, which could lead to a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2019-7733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove...

Linux Distros Unpatched Vulnerability : CVE-2024-47220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a...

Linux Distros Unpatched Vulnerability : CVE-2021-32715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hyper is an HTTP library for rust. hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests with a Content-Length header with a prefix...