EUVD-2026-58619

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

CVE-2026-73051

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

CVE-2026-73051

CVE-2026-73051 affects actix-http before 3.12.1. The HTTP/1.1 parser accepts requests with both Content-Length and Transfer-Encoding: chunked headers, enabling HTTP request smuggling. Unauthenticated remote attackers could use a front-end intermediary to desynchronize backend requests and smuggle...

EUVD-2026-58652

FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to disk. Attackers can send oversized request bodies that exceed the declared upload length to exhaust available disk spa...

CVE-2026-73051: Inconsistent Interpretation of HTTP Requests

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

CVE-2026-73568

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

CVE-2026-73568 py-libp2p: yamux connection DoS via oversized data frame

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

CVE-2026-73568 py-libp2p: yamux connection DoS via oversized data frame

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

EUVD-2026-58183

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

CVE-2026-73568 py-libp2p: yamux connection DoS via oversized data frame

py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handleincoming method in libp2p/streammuxer/yamux/yamux.py reads an attacker-controlled 32-bit DATA frame length with readexactly before validating it against MAXWINDOWSIZE or checking whether...

CVE-2026-68453

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of user-controlled length fields within the Common Cryptographic Architecture CCA token structures. An attacker could manipulate these fields to cause a buffer over-read or...

CVE-2026-68452

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length...

AZL-95786 CVE-2026-53792 affecting package rsync for versions less than 3.5.0-1

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

CVE-2026-53792

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

ALPINE-CVE-2026-53792

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

CVE-2026-53792 rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

CVE-2026-53792 rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

CVE-2026-53792

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...

CVE-2026-53792 rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially craft...