EUVD-2026-49895

Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters 0x0A into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers...

CVE-2026-67182

Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters 0x0A into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers...

CVE-2026-67182

Rouille 0.3.3 through 3.6.2 is affected by an HTTP request smuggling vulnerability. An attacker can inject bare line feed characters (0x0A) into client-supplied header values, which are copied verbatim to upstream connections without validation. A crafted header value can contain a complete addit...

CVE-2026-67182 Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Header Injection

Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters 0x0A into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers...

CVE-2025-21959

creationtimestamp| type| source ---|---|--- 2026-07-28 16:18:01+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-21938

creationtimestamp| type| source ---|---|--- 2026-07-28 16:17:59+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-21925

creationtimestamp| type| source ---|---|--- 2026-07-28 16:17:54+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-21919

creationtimestamp| type| source ---|---|--- 2026-07-28 16:17:51+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-21875

creationtimestamp| type| source ---|---|--- 2026-07-28 16:17:44+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-21846

creationtimestamp| type| source ---|---|--- 2026-07-28 16:17:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2025-21814

creationtimestamp| type| source ---|---|--- 2026-07-28 16:17:29+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2024-58056

creationtimestamp| type| source ---|---|--- 2026-07-28 16:16:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2024-58020

creationtimestamp| type| source ---|---|--- 2026-07-28 16:16:29+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CVE-2024-26783

creationtimestamp| type| source ---|---|--- 2026-07-28 16:15:18+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

EUVD-2026-49876

Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download file attachments from private and password-protected rooms they are not a member of by exploiting missing room membership checks in the file retrieval route. Attackers can...

CVE-2026-66750 Let's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files route

Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download file attachments from private and password-protected rooms they are not a member of by exploiting missing room membership checks in the file retrieval route. Attackers can...

CVE-2026-66750 Let's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files route

Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download file attachments from private and password-protected rooms they are not a member of by exploiting missing room membership checks in the file retrieval route. Attackers can...

MAL-2026-11132 Malicious code in bianira-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...

CVE-2026-61487 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

CVE-2026-61487

The CVE-2026-61487 vulnerability affects Apache ActiveMQ Broker, ActiveMQ All, and ActiveMQ where an authenticated, low-privilege user can bypass per-destination write ACLs by sending to a temporary composite destination whose physical name is a comma-separated list of real queues. The authorizat...