Kirby: Request header injection in `Http\Remote`

TL;DR This vulnerability affects Kirby sites and plugins that use the Kirby\Http\Remote class including Remote::request, Remote::get, Remote::post, and similar helpers to send outgoing HTTP requests and that pass untrusted, user-controlled data into the headers option of such a request. By...

HTTP Response Splitting

Overview Affected versions of this package are vulnerable to HTTP Response Splitting via the headers option in the Remote process. An attacker can inject or override HTTP headers in outgoing requests by including newline characters in user-controlled input that is forwarded to the header value...

CVE-2026-34356

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users. Mitigation To...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.17

Red Hat OpenShift Service Mesh 2.6.17 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...

CVE-2026-44185

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

CVE-2026-42536

A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...

CVE-2026-34355

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system. Mitigation Disable the modproxyhtml module if...

GHSA-J4F3-55X4-R6Q2 npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call

Summary The published npm package praisonai exports a TypeScript MCPServer that can expose tools, resources, and prompts over an HTTP JSON-RPC transport with: ts await server.start port: 3000 ; The HTTP transport has no authentication or authorization path. MCPServerConfig does not expose an...

GHSA-6H9P-93HQ-Q7H6 PraisonAI: SpiderTools redirect-target SSRF protection bypass

SpiderTools redirect-target SSRF protection bypass Summary SpiderTools.scrapepage validates the initial URL and rejects direct loopback, private, link-local, metadata, and internal hostnames. It then calls requests.Session.get without disabling automatic redirects or validating redirect Location...

NPM: http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

NPM: http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in fixRequestBody vulnerability discovered by ? in WordPress Npm http-proxy-middleware versions = 3.0.4, 3.0.7...

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the fixRequestBody function. An attacker can inject or override multipart form fields, potentially bypassing gateway-side validation or access controls, by supplying crafted input containing carriage return and line...

@oslokommune/auth-bff (>=2.0.1 <=2.2.1), @sap/vite-plugin-leanix-custom-report (>=8.6.0 <=8.7.1) potentially affected by CVE-2026-55602 via http-proxy-middleware (=4.0.0)

http-proxy-middleware NPM version =4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy-middleware and may be impacted: - @oslokommune/auth-bff =2.0.1, =8.6.0, =8.7.1 Source cves: CVE-2026-55602 Source advisory:...

http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

Summary http-proxy-middleware documents router proxy-table entries as host, path, or host+path selectors, but the host+path implementation uses unanchored substring matching on attacker-controlled request metadata. As a result, a crafted Host header that is only a superstring match for a configur...

GHSA-64MM-VXMG-Q3VJ http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

Summary http-proxy-middleware documents router proxy-table entries as host, path, or host+path selectors, but the host+path implementation uses unanchored substring matching on attacker-controlled request metadata. As a result, a crafted Host header that is only a superstring match for a configur...

Partial String Comparison

Overview Affected versions of this package are vulnerable to Partial String Comparison via the router component. An attacker can route requests to unintended backend servers by sending crafted HTTP requests with manipulated Host headers. Remediation Upgrade http-proxy-middleware to version 2.0.10...

@oslokommune/auth-bff (>=2.0.1 <=2.2.1), @sap/vite-plugin-leanix-custom-report (>=8.6.0 <=8.7.1) potentially affected by CVE-2026-55602 via http-proxy-middleware (=4.0.0)

http-proxy-middleware NPM version =4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy-middleware and may be impacted: - @oslokommune/auth-bff =2.0.1, =8.6.0, =8.7.1 Source cves: CVE-2026-55602 Source advisory: OSV:GHSA-64MM-VXMG-Q3VJ...

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0726react (=0.1.1) +30759 more potentially affected by CVE-2026-55602 via http-proxy-middleware (>=0.16.0 <=2.0.1)

http-proxy-middleware NPM version =0.16.0, =1.0.1, =1.1.0 - 0726react =0.1.1 - 0x0.icu.anima =0.1.0 - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0 - 0xgank-tea-central-compound =1.0.0 - 0xgank-tea-characteristic...

@adyen/adyen-salesforce-pwa (>=2.0.0 <=3.0.4), @amazeelabs/publisher (>=2.4.28 <=3.2.6) +76 more potentially affected by CVE-2026-55602 via http-proxy-middleware (>=3.0.0 <=3.0.5)

http-proxy-middleware NPM version =3.0.0, =2.0.0, =2.4.28, =1.0.0, =0.9.1-next.19, =0.9.1-next.19, =0.9.1-next.19, =0.0.4, =3.0.0-alpha-1, =24.3.0-depup.0, =2.1.0-next.0, =2.1.0-next.0, =9.0.0, =9.0.0, =9.6.1 and more Source cves: CVE-2026-55602 Source advisory: OSV:GHSA-64MM-VXMG-Q3VJ...

@adyen/adyen-salesforce-pwa (>=2.0.0 <=3.0.4), @amazeelabs/publisher (>=2.4.28 <=3.2.6) +76 more potentially affected by CVE-2026-55602 via http-proxy-middleware (>=3.0.0 <=3.0.5)

http-proxy-middleware NPM version =3.0.0, =2.0.0, =2.4.28, =1.0.0, =0.9.1-next.19, =0.9.1-next.19, =0.9.1-next.19, =0.0.4, =3.0.0-alpha-1, =24.3.0-depup.0, =2.1.0-next.0, =2.1.0-next.0, =9.0.0, =9.0.0, =9.6.1 and more Source cves: CVE-2026-55602 Source advisory: SNYK:JS-HTTPPROXYMIDDLEWARE-173750...

NPM: http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

NPM: http-proxy-middleware router host+path substring matching allows Host-header-driven backend routing bypass vulnerability discovered by ? in WordPress Npm http-proxy-middleware versions = 0.16.0, 2.0.10...