36783 matches found
CLSA-2026-1773879459 TuxCare security update for cookie-signature (1 CVE)
TuxCare rebuilt cookie-signature to address 1 CVE. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1773879467 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.3-tuxcare.1...
CLSA-2026-1773879462 TuxCare security update for cookie (1 CVE)
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.5.0-tuxcare.1...
CLSA-2026-1773274558 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.5.0-tuxcare.1...
CLSA-2026-1773274553 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.4.3-tuxcare.1...
CLSA-2026-1773274554 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 3.0.1-tuxcare.1...
CLSA-2026-1773101696 TuxCare security update for tough-cookie (3 CVEs)
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 2.2.0-tuxcare.1...
CLSA-2026-1772583199 TuxCare security update for tough-cookie (3 CVEs)
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 0.12.1-tuxcare.1...
PYSEC-2026-3578 linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect
Summary lib.url.fetch follows HTTP redirects followredirects=True. httpx strips only Authorization and Cookie when a redirect crosses the origin, so any other caller-supplied credential header a session token such as Redfish's X-Auth-Token, an API key, ... was still sent to the redirect target. A...
CVE-2026-14816
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
EUVD-2026-52584
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
CVE-2026-14816 The GDPR Framework < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
CVE-2026-14816
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
PT-2026-75132
TuxCare rebuilt js-cookie to address 1 CVE. Fixed in 2.2.1-tuxcare.1...
PT-2026-74024
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.5.0-tuxcare.1...
PT-2026-74029
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.3-tuxcare.1...
PT-2026-74028
TuxCare rebuilt cookie to address 2 CVEs. Fixed in 0.3.1-tuxcare.1...
PT-2026-74085
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 1.2.0-tuxcare.1...