PT-2026-137154

go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows attackers to redirect victims to external hosts by embedding tab characters in request paths. Attackers can craft links with a URL-encoded tab, which browsers strip from the 301...

IBM MQ buffer error vulnerability

Buffer error vulnerabilities exist in IBM MQ versions 9.4.0.0 through 9.4.0.26, 9.4.1.0 through 9.4.5.3, and 10.0.0.1 through 10.0.0.5. These vulnerabilities stem from improper validation of the length field in the message header structure, potentially allowing authenticated attackers to obtain...

CVE-2026-63183: omniauth: OmniAuth is a flexible authentication system utilizing Rack middleware

OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to 2.2.0, OmniAuth derives provider callback URLs from request-controlled host information when neither a fixed fullhost nor framework-level incoming host validation is configured. A remote unauthenticated client can...

CVE-2026-121946: zbateson mail-mime-parser: zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in…

zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters. Attackers supplying crafted MIME type, charset, encoding, micalg, or protocol values can inject extra header lines such a...

PT-2026-136966

zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters. Attackers supplying crafted MIME type, charset, encoding, micalg, or protocol values can inject extra header lines such a...

Fedora 44 : unshield (2026-1a569ece37)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1a569ece37 advisory. Validate the file table against the header size Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : unshield (2026-3a7914c436)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3a7914c436 advisory. Validate the file table against the header size Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-119417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email header injection vulnerability because...

OmniAuth input validation error vulnerability

Versions prior to OmniAuth 2.2.0 contain an input validation error vulnerability. This vulnerability arises because OmniAuth derives the provider callback URL from the host information controlled by the request. Remote, unauthenticated attackers can supply a forged Host header, leading to a risk ...

PT-2026-137105

Name of the Vulnerable Software and Affected Versions OmniAuth versions prior to 2.2.0 Description OmniAuth derives provider callback URLs from request-controlled host information when neither a fixed full host nor framework-level incoming host validation is configured. A remote unauthenticated...

PT-2026-137165

IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields...

CVE-2026-120647 CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename

CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename. header-attachment = $name writes $name into the quoted filename parameter of Content-Disposition without escaping double quotes. An application that passe...

CVE-2026-120644

The CGI::Cookie module for Perl (versions before 5.00 ) is vulnerable to cookie attribute injection due to insufficient validation of the path, domain, and expires values. The module fails to check for semicolons or control characters before writing these values into the Set-Cookie header. If an ...

CVE-2026-120644 CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values

CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. The path, domain and expires values are written into the Set-Cookie header without checking for semicolons or control characters. An application that sets them from request...

CVE-2026-120644 CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values

CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. The path, domain and expires values are written into the Set-Cookie header without checking for semicolons or control characters. An application that sets them from request...

CVE-2026-120644

CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. The path, domain and expires values are written into the Set-Cookie header without checking for semicolons or control characters. An application that sets them from request...

CVE-2026-120639

The perl-CGI module (versions before 5.00 ) is vulnerable to HTTP header injection and HTTP response splitting . The root cause is that when autoEscape is off, the header function decodes HTML entities after performing newline checks, allowing encoded CR or LF characters to reach the response. Ad...

CVE-2026-120639

CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipartstart and dopush. With autoEscape off, header decodes HTML entities in extra header values after its newline check, so an encoded CR or LF reaches t...

CVE-2026-120639 CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push

CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipartstart and dopush. With autoEscape off, header decodes HTML entities in extra header values after its newline check, so an encoded CR or LF reaches t...

CVE-2026-120639 CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push

CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipartstart and dopush. With autoEscape off, header decodes HTML entities in extra header values after its newline check, so an encoded CR or LF reaches t...