CLSA-2026-1773879464 TuxCare security update for cookie (1 CVE)

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.0.5-tuxcare.1...

CLSA-2026-1773879459 TuxCare security update for cookie-signature (1 CVE)

TuxCare rebuilt cookie-signature to address 1 CVE. Fixed in 1.0.0-tuxcare.1...

CLSA-2026-1773879467 TuxCare security update for cookie (1 CVE)

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.3-tuxcare.1...

CLSA-2026-1773879466 TuxCare security update for cookie (1 CVE)

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.3.1-tuxcare.1...

CLSA-2026-1773879462 TuxCare security update for cookie (1 CVE)

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.5.0-tuxcare.1...

CLSA-2026-1773274553 TuxCare security update for tough-cookie (1 CVE)

TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.4.3-tuxcare.1...

CLSA-2026-1773274554 TuxCare security update for tough-cookie (1 CVE)

TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 3.0.1-tuxcare.1...

CLSA-2026-1773274558 TuxCare security update for tough-cookie (1 CVE)

TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.5.0-tuxcare.1...

CLSA-2026-1773101696 TuxCare security update for tough-cookie (3 CVEs)

TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 2.2.0-tuxcare.1...

CLSA-2026-1772583199 TuxCare security update for tough-cookie (3 CVEs)

TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 0.12.1-tuxcare.1...

PYSEC-2026-3578 linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect

Summary lib.url.fetch follows HTTP redirects followredirects=True. httpx strips only Authorization and Cookie when a redirect crosses the origin, so any other caller-supplied credential header a session token such as Redfish's X-Auth-Token, an API key, ... was still sent to the redirect target. A...

CVE-2026-14816

The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...

EUVD-2026-52584

The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...

CVE-2026-14816

The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...

CVE-2026-14816 The GDPR Framework < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam

The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...

PT-2026-74029

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.3-tuxcare.1...

PT-2026-74028

TuxCare rebuilt cookie to address 2 CVEs. Fixed in 0.3.1-tuxcare.1...

PT-2026-75132

TuxCare rebuilt js-cookie to address 1 CVE. Fixed in 2.2.1-tuxcare.1...

PT-2026-74024

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.5.0-tuxcare.1...

Linux Distros Unpatched Vulnerability : CVE-2026-69245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, SetCookie::matchesDomain gives every subdomain of a cookie Domain that cookie unless...