OmniAuth: Host Header Injection Vulnerability

Impact Host header injection risk when using Omniauth with a web framework that does not verify incoming host headers. An example of a framework that provides host header validation is modern Rails when configured appropriately Patches 2.2.0 Workarounds Set the fullhost config in the Omniauth con...

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...

node-cve-2026-106070-check

node-cve-2026-106070-check Offline version-evidence checker for CVE-2026-106070, Node.js: ZipFile invalid-header content substitution. It compares Node.js runtime versions that you report against the fixed release named in the vendor advisory and writes a CSV, JSON or HTML triage report. Python...

CVE-2026-125246 FFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragment

FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...

CVE-2026-119755

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess by crafting a Referer header where the device hostname or IP appears as a substring...

tomcat: Apache Tomcat: HTTP/2 request smuggling due to header mix-up

A flaw was found in Apache Tomcat. This vulnerability, identified as HTTP Request/Response smuggling, stems from an inconsistent interpretation of HTTP/2 requests. A regression in a prior security fix can cause request headers to be mixed up. This could allow a remote attacker to bypass security...

tomcat: Apache Tomcat: HTTP/2 request smuggling due to header mix-up

A flaw was found in Apache Tomcat. This vulnerability, identified as HTTP Request/Response smuggling, stems from an inconsistent interpretation of HTTP/2 requests. A regression in a prior security fix can cause request headers to be mixed up. This could allow a remote attacker to bypass security...

EUVD-2026-120124

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess by crafting a Referer header where the device hostname or IP appears as a substring...

CVE-2026-119755 Tasmota 16.0.0 CSRF via Referer Header Validation Bypass

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess by crafting a Referer header where the device hostname or IP appears as a substring...

CVE-2026-119755 Tasmota 16.0.0 CSRF via Referer Header Validation Bypass

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess by crafting a Referer header where the device hostname or IP appears as a substring...

CVE-2026-119755

Tasmota versions through 16.0.0 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in the HttpCheckPriviledgedAccess() function. The root cause is a failure in Referer-based CSRF protection validation, which can be bypassed by crafting a Referer header containing the device's hos...

CVE-2026-119755 Tasmota 16.0.0 CSRF via Referer Header Validation Bypass

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess by crafting a Referer header where the device hostname or IP appears as a substring...

EUVD-2026-120122

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase mblockspermcu without checking the buffers sized from the frame components. A...

CVE-2026-124249

The CPython http.cookiejar.CookieJar component is vulnerable to an Origin Validation Error (CWE-346). A server could delete stored cookies belonging to other domains from a shared cookie jar—such as the one used by urllib's HTTPCookieProcessor—by sending a response with an already expired Set-Coo...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the OpenAPI module's Swagger UI page, which writes a value derived from the request's Host header into an inline script block without encoding or validation. Because URI.create does not neutralize a maliciou...

CVE-2026-123766

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in the OpenAPI module of Apache Axis2/Java. The Swagger UI page served by the OpenAPI module wrote a value derived from the request's Host header into the page without encoding, allowing script injectio...

CVE-2026-123766

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in the OpenAPI module of Apache Axis2/Java. The Swagger UI page served by the OpenAPI module wrote a value derived from the request's Host header into the page without encoding, allowing script injectio...

CVE-2026-123766

The Apache Axis2/Java software (version 2.0.1 ) is vulnerable to a Cross-site Scripting (XSS) flaw within its OpenAPI module . The root cause is the improper neutralization of input during web page generation, where the Swagger UI page writes a value derived from the request's Host header into th...

CVE-2026-123766 Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI page

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in the OpenAPI module of Apache Axis2/Java. The Swagger UI page served by the OpenAPI module wrote a value derived from the request's Host header into the page without encoding, allowing script injectio...

CVE-2026-123766 Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI page

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in the OpenAPI module of Apache Axis2/Java. The Swagger UI page served by the OpenAPI module wrote a value derived from the request's Host header into the page without encoding, allowing script injectio...