143674 matches found
CLEANSTART-2026-XE02231 Some mod_proxy configurations on Apache HTTP Server versions 2
Security vulnerability affects the apache2 package. Some modproxy configurations on Apache HTTP Server versions 2...
CLEANSTART-2026-FU14728 SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests
Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests...
CLEANSTART-2026-JH66547 Improper escaping of output in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Improper escaping of output in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-OA48166 Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance
Security vulnerability affects the apache2 package. Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance...
CLEANSTART-2026-PP94302 HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack
Security vulnerability affects the apache2 package. HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack...
CLEANSTART-2026-CF08389 regression in the core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. A regression in the core of Apache HTTP Server 2...
CLEANSTART-2026-BD98589 partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2...
CLEANSTART-2026-DF56906 HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response
Security vulnerability affects the apache2 package. HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response...
CLEANSTART-2026-EM71520 Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses
Security vulnerability affects the apache2 package. Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses...
CLEANSTART-2026-IB07435 Vulnerability in core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. Vulnerability in core of Apache HTTP Server 2...
CLEANSTART-2026-OB27244 Encoding problem in mod_proxy in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Encoding problem in modproxy in Apache HTTP Server 2...
CLEANSTART-2026-QV20553 SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2
Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2...
CLEANSTART-2026-RW47407 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Substitution encoding issue in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-WF86343 Potential SSRF in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Potential SSRF in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-XP17348 null pointer dereference in mod_proxy in Apache HTTP Server 2
Security vulnerability affects the apache2 package. null pointer dereference in modproxy in Apache HTTP Server 2...
CLEANSTART-2026-TV45483 urllib3 is an HTTP client library for Python
Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-NP31070 When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location
Security vulnerability affects the php package. When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location...
CLEANSTART-2026-GS69152 When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, ...
Security vulnerability affects the php package. When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a different port, or a downgrade from HTTPS to HTTP...
CLEANSTART-2026-WW44198 SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger
Security vulnerability affects the php package. The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger...
CLEANSTART-2026-QO22872 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0
CVE-2026-33814 affects multiple packages. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0. See references for individual vulnerability details...