CVE-2026-60021 Gitea GitLab migration denial of service

Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...

CVE-2026-60021

Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...

CVE-2026-25946 Gitea OpenID discovery server-side request forgery

When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal network addresses. An unauthenticated remote attacker can cause the server to contact loopback or private-network HTTP services. This can...

Exploit for CVE-2026-92392

CVE-2026-92392 curl/libcurl Exposure Checker A defensive chec...

CVE-2026-110618 SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control API

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or...

K000162613: NGINX ngx_http_v3_module vulnerability CVE-2026-95101

Security Advisory Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with proxyrequestbuffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. CVE-2026-95101 Impact This vulnerability may...

CVE-2026-86414

A flaw was found in curl. A malicious or compromised HTTP proxy server can trick curl into sending authentication credentials intended for the target destination server directly to the proxy itself. When establishing a connection tunnel, if the proxy replies with an HTTP 401 Unauthorized status...

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact...

a11ywatch_cli (>=0.0.26, <=0.6.51), abstractapi (>=0.1.0, <=0.1.3) +1497 more potentially affected by unknown CVE via rustls (>=0.12.0, <=0.21.12)

rustls CARGO version =0.12.0, =0.0.26, =0.1.0, =0.1.0, =0.3.5, =0.3.0, =1.0.0, =1.0.0, =0.6.0, =0.1.0, =0.2.0, =1.0.0, =0.1.0, =0.1.10 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0349...

RUSTSEC-2026-0351 `wasi-http`: Request with long url before query parameter crashes host

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-w36r-2hch-9xp9 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0350 Guests can send absolute-form HTTP requests to different hosts

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5qpp-g3j2-8frx For more information see the GitHub-hosted security advisory...

`wasi-http`: Request with long url before query parameter crashes host

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-w36r-2hch-9xp9 For more information see the GitHub-hosted security advisory...

Guests can send absolute-form HTTP requests to different hosts

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5qpp-g3j2-8frx For more information see the GitHub-hosted security advisory...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the -J option in the command-line tool when handling HTTP 103 Early Hints responses or specific header ordering. An attacker can overwrite existing local files by controlling the remote server's...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in builds configured with the Microsoft Schannel TLS backend, the connection cache fails to properly evaluate client certificate authentication settings during HTTP redirects. An attacke...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the Negotiate authentication process when configured to follow HTTP redirects using system-provided Kerberos credentials. An attacker can obtain sensitive authentication data by...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the process handling HTTP redirects with embedded credentials. An attacker can obtain sensitive authentication tokens by redirecting a client to an untrusted third-party server, causing the client to transmit...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in the tunnel process. An attacker can obtain sensitive authentication credentials by intercepting traffic through a malicious or compromised HTTP proxy server that responds with an HTTP...

curl: curl: HTTP/2 upload Use-After-Free

A flaw was found in curl. When curl uploads data over an HTTP/2 connection, it mishandles server stream reset frames, which can lead to the reuse of previously released memory. Under specific memory and timing conditions, a malicious server can exploit this flaw to execute arbitrary code on the...

curl: curl: Negotiate credentials sent to redirected origin

A flaw was found in curl. When curl is configured to follow HTTP redirects while performing Negotiate authentication using system-provided Kerberos credentials, it may forward authentication details to an unrelated destination. A malicious server can exploit this flaw by redirecting the client to...