208 matches found
Important: Red Hat Security Advisory: nodejs26 security, bug fix, and enhancement update
An update for nodejs26 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
nodejs: Node.js: Certification validation bypass in TLS host verification
A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...
RHEL 9 : nodejs:26 (RHSA-2026:97855)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:97855 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...
nodejs: Node.js: Certification validation bypass in TLS host verification
A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...
`verify_x509_cert` does not check the certificate validity period
tdxworkloadattestation::verification::x509::verifyx509cert, available with the host-verification feature, checked that issuercert issued cert and verified the certificate signature. It did not check the certificate's validity period, so it accepted expired and not-yet-valid certificates. With the...
EulerOS Virtualization 2.15.0 : curl (EulerOS-SA-2026-4809)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream- dependency tree via...
EulerOS Virtualization 2.15.1 : curl (EulerOS-SA-2026-4750)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream- dependency tree via...
Security update for curl
This update for curl fixes the following issues: CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. CVE-2026-11856: cross-origin Digest auth state leak bsc1268426. CVE-2026-12064: proto-default skips SSH verification bsc1268427. CVE-2026-19931: Negotiate ambient user conn...
SUSE-SU-2026:5071-1 Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-11856: cross-origin Digest auth state leak bsc1268426. - CVE-2026-12064: proto-default skips SSH verification bsc1268427. - CVE-2026-19931: Negotiate ambient user...
SUSE-SU-2026:4954-1 Security update for curl
This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-11856: cross-origin Digest auth state leak bsc1268426. - CVE-2026-18924: HTTP/2 server push UAF bsc1277477. - CVE-2026-19931: Negotiate ambient user conn reuse...
Curl 7.81.0 < 8.23.0 SFTP/SCP Host Verification Bypass
The version of curl installed on the remote host is 7.81.0 prior to 8.23.0. It is, therefore, affected by a security bypass vulnerability: - A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a resul...
DEBIAN-CVE-2026-86410
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
AZL-110295 CVE-2026-86410 affecting package tensorflow 2.16.1-11
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
ALPINE-CVE-2026-86410
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
AZL-110232 CVE-2026-86410 affecting package rust 1.96.1-2
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
CVE-2026-86410
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
AZL-109962 CVE-2026-86410 affecting package curl for versions less than 8.11.1-14
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
AZL-110169 CVE-2026-86410 affecting package rust 1.75.0-31
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
CVE-2026-86410 redirect to SFTP or SCP bypasses host verification
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...
