CVE-2026-111887 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauthenticated attackers to confirm registered display names and emails via a distinct HTTP 409 response. Attackers can submit guest comments to the comment create endpoint with...

CVE-2026-111887 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauthenticated attackers to confirm registered display names and emails via a distinct HTTP 409 response. Attackers can submit guest comments to the comment create endpoint with...

CVE-2026-111887

The phpMyFAQ application is vulnerable to account enumeration in versions prior to 4.1.9 and 4.2.0-alpha before 4.2.0-beta . An unauthenticated attacker can submit guest comments to the comment creation endpoint, using candidate usernames and emails to confirm registered account details. The syst...

David Courtey: Database Authorization Vulnerability

David Courtey: Versions of the DatabaseEngine 1.8.1 and earlier have an authorization issue. This vulnerability stems from the improper handling of the parameter schemaname by the Scheduled Restore component in the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php. As a result,...

Gitea’s improper exception handling vulnerabilities

Gitea 28.1.0 and earlier versions have a vulnerability related to improper exception handling. This vulnerability arises when the organization’s handler processes requests from individual users with the format username/-/repositories. In such cases, the handler may dereference an empty...

Vanus-Labs Vanus authorization issue vulnerability

In the versions of Vanus-Labs’ Vanus from 0.8.0 to 0.9.0, there is an authorization issue vulnerability. This vulnerability stems from the lack of authentication. Unauthenticated remote attackers can send forged CloudEvents through the Gateway CloudEvents HTTP receiver, to the eventbus at the...

CLSA-2026-1792233236 TuxCare security update for i18next-http-backend (1 CVE)

TuxCare rebuilt i18next-http-backend to address 1 CVE. Fixed in 2.5.2-tuxcare.2...

CLSA-2026-1792233117 TuxCare security update for i18next-http-backend (1 CVE)

TuxCare rebuilt i18next-http-backend to address 1 CVE. Fixed in 1.4.4-tuxcare.2...

curl: CRLF injection in the HTTP request-line via `CURLOPT_REQUEST_TARGET` (`--request-target`)

Summary The CURLOPTREQUESTTARGET option string reaches the wire with no CR/LF neutralization, even though it is formatted directly into the HTTP request-line, which is terminated by CRLF. Curlsetstropt lib/setopt.c stores the option string after checking only the 8 MB length cap CURLMAXINPUTLENGT...

curl: curl CONNECT response header colon-check bypass in cf-h1-proxy single_header — proxy authentication bypass via injected HTTP/1.x status line

Summary In the HTTP/1.1 proxy-CONNECT response parser lib/cf-h1-proxy.c, singleheader, the per-line counter data-req.headerline a.k.a. k-headerline is never incremented — only the tunnel-local ts-headerlines is. Curlreqsoftreset resets k-headerline to 0 before the CONNECT exchange begins, and it...

MGASA-2026-0510 Updated python-django package fixes security vulnerabilities

Potential denial-of-service vulnerability in getsupportedlanguagevariant. CVE-2026-77050 Potential denial-of-service vulnerability in HTTP header parsing. CVE-2026-84429 Potential request forgery via spatial lookup byte values. CVE-2026-87890 Privilege abuse in model formsets with editable primar...

Updated python-django package fixes security vulnerabilities

Potential denial-of-service vulnerability in getsupportedlanguagevariant. CVE-2026-77050 Potential denial-of-service vulnerability in HTTP header parsing. CVE-2026-84429 Potential request forgery via spatial lookup byte values. CVE-2026-87890 Privilege abuse in model formsets with editable primar...

[SECURITY] Fedora 43 Update: httpd-2.4.69-1.fc43

The Apache HTTP Server is a powerful, efficient, and extensible web server...

CLEANSTART-2026-IS42310 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...

CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details...

CLEANSTART-2026-MH20908 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently

CVE-2026-97032 affects multiple packages. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. See references for individual vulnerability details...

CLEANSTART-2026-XJ89582 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...

CVE-2026-78669 affects multiple packages. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values. See references for individual vulnerability...

CLEANSTART-2026-IM74303 client may issue specially crafted HTTP/1

Security vulnerability affects the apache-zookeeper package. A client may issue specially crafted HTTP/1...

CLEANSTART-2026-XA13767 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...

CLEANSTART-2026-SU71305 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request

CVE-2026-78659 affects multiple packages. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request. See references for individual vulnerability details...

CLEANSTART-2026-KS88992 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing

CVE-2026-78660 affects multiple packages. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. See references for individual vulnerability details...