EUVD-2026-40945

In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML files with Content-Type: text/html and without a Content-Security-Policy or Content-Disposition: attachment response header. An unauthenticated attacker can register a publisher account, upload a VSIX...

[SECURITY] Fedora 43 Update: fcgi-2.4.7-1.fc43

FastCGI is a language independent, scalable, open extension to CGI that provides high performance without the limitations of server specific APIs...

The vulnerability of the TCP Fast Open (TFO) protocol extension in the Snort intrusion detection system allows a hacker to bypass the configured file policy for HTTP.

The vulnerability of the TCP Fast Open TFO protocol extension in the Snort intrusion detection system is related to deficiencies in the data protection mechanism. Exploiting this vulnerability allows a malicious actor to bypass the configured file policy for HTTP...