5759 matches found
DEBIAN-CVE-2026-55653
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...
MINI-X4WF-P79W-PHX9
Bulletin has no description...
MINI-94JP-86QR-555M
Bulletin has no description...
MINI-Q9WG-8P57-VRGM
Bulletin has no description...
MINI-7C7P-66P6-GQ64
Bulletin has no description...
MINI-FRX7-RPPV-HPC2
Bulletin has no description...
DEBIAN-CVE-2026-48931
A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...
DEBIAN-CVE-2026-54276
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after following a cross-origin redirect. This likely requires an open redirect vulnerability or similar on the target domain for an attacker to...
DEBIAN-CVE-2026-54283
Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form accepts maxfields and maxpartsize to bound resource consumption while parsing form data. These limits are enforced for multipart/form-data, but silently ignored for application/x-www-form-urlencoded. An...
DEBIAN-CVE-2026-54279
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save and then restored later with CookieJar.load lose their host-only status. This vulnerability is fixed in 3.14.1...
DEBIAN-CVE-2026-54274
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory use. This vulnerability is fixed in 3.14.1...
DEBIAN-CVE-2026-54273
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, no limit was present on the number of pipelined requests that could be queued. An attacker may be able to use pipelined requests to use excessive amounts of memory, potentially leading to DoS. This...
MINI-33MG-RPJC-RRW8
Bulletin has no description...
MINI-2C6X-G2J9-433H
Bulletin has no description...
MINI-VPM3-6P43-77G4
Bulletin has no description...
MINI-WP5C-77QX-CW38
Bulletin has no description...
MINI-HP36-PR2W-J2PX
Bulletin has no description...
MINI-R39F-43JH-2P8G
Bulletin has no description...