3 matches found
CVE-2026-26275
httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in "httpsig-hyper" prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's "matches!" macro. Specifically, the comparison "if matches!digest, expecteddigest"...
CVE-2026-26275: Improper Validation of Integrity Check Value
httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in httpsig-hyper prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's matches! macro. Specifically, the comparison if matches!digest, expecteddigest treate...
PT-2017-17950
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.5.2 Description The issue allows RSS fields to inject new lines into the created email structure, thereby modifying the message body. Recommendations For versions prior to 52.5.2, update to version 52.5.2 or...