ALPINE-CVE-2026-87862

Importing a includeSubDomains parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS...

urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override

A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security TLS settings inadvertently overwrite the proxy's TLS configuration, which can disabl...

Important: Red Hat Security Advisory: python3.12-urllib3 security update

An update for python3.12-urllib3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python3.14-urllib3 security update

An update is available for python3.14-urllib3. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programmin...

RLSA-2026:84578 Important: python3.14-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RLSA-2026:84577 Important: python3.14-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python3.14-urllib3 security update

An update is available for python3.14-urllib3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

CLEANSTART-2026-UA04253 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

Oracle E-Business Suite: CVE-2026-83382: Critical Patch Update

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

Oracle E-Business Suite: CVE-2026-101649: Critical Patch Update

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Partner...

PT-2026-119840

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise JD Edwards...

PT-2026-119332

Name of the Vulnerable Software and Affected Versions Oracle Mobile Field Service of Oracle E-Business Suite versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Mobile Field Service. A low privileged attacker with network access via HTTPS...

python-urllib3 security update

1.26.19-4.2 - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282258 1.26.19-4.1 - CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override HTTPS proxy TLS configuration...

PT-2026-119333

Name of the Vulnerable Software and Affected Versions Oracle Mobile Field Service of Oracle E-Business Suite versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Mobile Field Service. A low privileged attacker with network access via HTTPS...

RockyLinux 9 : python3.14-urllib3 (RLSA-2026:84577)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:84577 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS prox...

PT-2026-119329

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Partner...

PT-2026-119803

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Interoperability SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise JD Edwards...

PT-2026-119368

Name of the Vulnerable Software and Affected Versions Oracle Mobile Field Service of Oracle E-Business Suite versions 12.2.3 through 12.2.15 Description An issue exists in the Admin UI component that allows a high privileged attacker with network access via HTTPS to compromise the system...

PT-2026-120045

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle SOA Suite...

PT-2026-119847

Vulnerability in the iProcurement product of Oracle E-Business Suite component: E-Content Manager Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise iProcurement. Successful...