2 matches found
CVE-2026-26275: Improper Validation of Integrity Check Value
httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in httpsig-hyper prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's matches! macro. Specifically, the comparison if matches!digest, expecteddigest treate...
7.5CVSS5.7AI score0.00253EPSS
SaveExploits0References1
PT-2017-17950
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.5.2 Description The issue allows RSS fields to inject new lines into the created email structure, thereby modifying the message body. Recommendations For versions prior to 52.5.2, update to version 52.5.2 or...
10CVSS0.33771EPSS
SaveExploits31References440
20