CVE-2026-44889

WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb joins the redirect target to the request URI using Python's urljoin, and since Python 3.10 the underlying urlsplit stri...

CVE-2026-44889

WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb joins the redirect target to the request URI using Python's urljoin, and since Python 3.10 the underlying urlsplit stri...

CVE-2026-56326

Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 contain a server-side open redirect vulnerability in navigateTo that fails to properly validate path-normalized payloads like /..//evil.com and /.//evil.com. Attackers can bypass external-host checks using path-normalization techniques to...

MINI-JCF7-QX3R-37XV

Bulletin has no description...

MINI-WGWP-RM9G-7P57

Bulletin has no description...

MINI-37FM-78JH-R7H5

Bulletin has no description...

MINI-544W-VRMV-G3FR

Bulletin has no description...

MINI-J7FC-23XH-PGR2

Bulletin has no description...

MINI-C47P-FJ2X-WW4X

Bulletin has no description...

MINI-73G2-8V54-Q3HG

Bulletin has no description...

MINI-VHWW-P47X-Q2M6

Bulletin has no description...

CVE-2026-44889: URL Redirection to Untrusted Site

WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb joins the redirect target to the request URI using Python's urljoin, and since Python 3.10 the underlying urlsplit stri...

MINI-2686-WG27-XWGM

Bulletin has no description...

MINI-XV3W-625M-FCXX

Bulletin has no description...

MINI-XPF7-H8F2-2MG2

Bulletin has no description...

MINI-CHJ3-J2MJ-CQ7Q

Bulletin has no description...

MINI-F8CH-HP76-WW77

Bulletin has no description...

MINI-7VVV-WQVV-JWWG

Bulletin has no description...

MINI-PQP6-82RJ-WF49

Bulletin has no description...

CVE-2026-56218 Capgo - EXIF Metadata Exposure via Image Upload

Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time...