Lucene search
+L

6 matches found

OSV
OSV
added 2026/07/13 3:46 p.m.3 views

PYSEC-2026-2495 Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

Summary The Glances XML-RPC server glances -s introduced a configurable CORS origin list in version 4.5.3 as a mitigation for CVE 2026-33533. However, the implementation silently falls back to Access-Control-Allow-Origin: whenever corsorigins contains more than one entry. An operator who configur...

7.4CVSS6.1AI score0.00232EPSS
SaveExploits1References6
OSV
OSV
added 2026/06/19 9:16 p.m.21 views

GHSA-PR33-38XX-6R26 http4k: BasicCookieStorage` (renamed `InsecureCookieStorage`) did not enforce RFC 6265 cookie scoping; new `DefaultCookieStorage` is now the default

Impact The previous BasicCookieStorage did not enforce RFC 6265 scoping rules around cookie domain, path, and Secure attribute. A client using a single storage instance to talk to multiple origins could have cookies leak across domains, or have Secure cookies sent over plain HTTP — the deprecatio...

6.9CVSS5.9AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/06/19 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-6734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the...

8.8CVSS6.7AI score0.00345EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/17 4:36 p.m.54 views

CVE-2026-6734

Summary of CVE-2026-6734 : A vulnerability in undici’s Socks5ProxyAgent causes cross-origin request routing by reusing a single connection pool across multiple origins without verifying the pool origin. As a result, requests for origin B can be dispatched through the pool for origin A; credential...

8.8CVSS5.3AI score0.00345EPSS
SaveExploits0References16Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/17 4:36 p.m.13 views

CVE-2026-6734 undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requests are dispatched through the pool connected to the first origin, regardless of the intended destination. This caus...

7.5CVSS5.3AI score0.00345EPSS
SaveExploits0References2
Akamai Blog
Akamai Blog
added 2020/10/12 10:0 p.m.68 views

Three Cloud-First Akamai Initiatives to Support Your Cloud Journey

61% of organizations plan to focus on cloud migration this year. 93% have a multi-cloud strategy.1 This means that on average your organization is using 2.2 public clouds, multiplying your complexity and your costs. While the cloud has delivered on a lot of promises, it isn't getting simpler or...

7.1AI score
SaveExploits0
Rows per page
Query Builder