Important: Red Hat Security Advisory: nodejs26 security, bug fix, and enhancement update

An update for nodejs26 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...

RHEL 9 : nodejs:26 (RHSA-2026:97855)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:97855 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...

Security update for curl

This update for curl fixes the following issues: CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. CVE-2026-11856: cross-origin Digest auth state leak bsc1268426. CVE-2026-12064: proto-default skips SSH verification bsc1268427. CVE-2026-19931: Negotiate ambient user conn...

SUSE-SU-2026:5071-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-11856: cross-origin Digest auth state leak bsc1268426. - CVE-2026-12064: proto-default skips SSH verification bsc1268427. - CVE-2026-19931: Negotiate ambient user...

SUSE-SU-2026:4954-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-11856: cross-origin Digest auth state leak bsc1268426. - CVE-2026-18924: HTTP/2 server push UAF bsc1277477. - CVE-2026-19931: Negotiate ambient user conn reuse...

Curl 7.81.0 < 8.23.0 SFTP/SCP Host Verification Bypass

The version of curl installed on the remote host is 7.81.0 prior to 8.23.0. It is, therefore, affected by a security bypass vulnerability: - A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a resul...

DEBIAN-CVE-2026-86410

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

AZL-110295 CVE-2026-86410 affecting package tensorflow 2.16.1-11

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

AZL-110232 CVE-2026-86410 affecting package rust 1.96.1-2

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

ALPINE-CVE-2026-86410

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

CVE-2026-86410

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

AZL-110169 CVE-2026-86410 affecting package rust 1.75.0-31

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

AZL-109962 CVE-2026-86410 affecting package curl 8.11.1-12

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

EUVD-2026-105275

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

CVE-2026-86410 redirect to SFTP or SCP bypasses host verification

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

CVE-2026-86410

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

CVE-2026-86410

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect...

CVE-2026-86410

The curl command line tool is affected by a security bypass vulnerability where SSH host verification options are only applied during direct SFTP or SCP interactions. A flaw in the tool's logic causes these verification options to be omitted when following a redirect. This issue affects versions ...