dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

Server-side Request Forgery (SSRF)

Overview @sveltejs/kit is a SvelteKit framework and CLI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via server-side self-fetch fallbacks that automatically follow HTTP redirects. SvelteKit makes server-side fallback requests to URLs derived from the incomi...

CVE-2026-114062

SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,...

CVE-2026-114056

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UPDATESCHEMA permission. Attackers can send a bare ALTER TYPE edgeType WITH lightweight = true command over the HTTP, gRPC...

CLEANSTART-2026-QX63869 HTTP parser in all current versions of Node

Security vulnerability affects the nodejs-24 package. The HTTP parser in all current versions of Node...

CLEANSTART-2026-WZ77365 Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service

Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service...

CLEANSTART-2026-XC13093 Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service...

CLEANSTART-2026-ST98216 Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service...

CLEANSTART-2026-EG08504 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames

CVE-2023-45288 affects multiple packages. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. See references for individual vulnerability details...

CLEANSTART-2026-QQ59156 Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service...

CLEANSTART-2026-BU08584 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service...

CLEANSTART-2026-BX90561 Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service

Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service...

CLEANSTART-2026-XE23259 Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons

Security vulnerability affects the nodejs-24 package. Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons...

CLEANSTART-2026-YO77738 HTTP request smuggling in Node

Security vulnerability affects the nodejs-24 package. HTTP request smuggling in Node...

CLEANSTART-2026-GA51993 llhttp parser in the http module in Node v18

Security vulnerability affects the nodejs-24 package. The llhttp parser in the http module in Node v18...

CLEANSTART-2026-NQ17832 Undici is an HTTP/1

Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...

CLEANSTART-2026-AU79702 Undici is an HTTP/1

Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...

CLEANSTART-2026-TM79261 Undici is an HTTP/1

Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...

CLEANSTART-2026-GV93850 team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling

Security vulnerability affects the nodejs-24 package. The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling...