github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...

PT-2026-114290

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description When OpenID sign-in is enabled, the software processes unauthenticated assertion parameters and sends an HTTP POST request to a caller-supplied OpenID provider endpoint during verification. Thi...

PT-2026-114288

Name of the Vulnerable Software and Affected Versions Talos Linux versions prior to 1.12.9 Talos Linux versions prior to 1.13.3 Description In talosctl support, the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml are includ...

CVE-2026-77564: Cleartext Storage of Sensitive Information

Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml in generated support bundles instead of marking...

PT-2026-120356

Уязвимость программного обеспечения для пула соединения в PostgreSQL PgBouncer связана с неконтролируемым расходом ресурсов при обработке параметров options и ignore startup parameters. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: dovecot (UTSA-2026-130079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130079 advisory. An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive...

CVE-2026-78231: Server-Side Request Forgery (SSRF)

When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint during verification. An attacker controls the destination and much of the form body, allowing interaction with internal HTTP services...

CVE-2026-101896: Uncontrolled Resource Consumption

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

Keycloak OpenID Connect DoS

The vulnerability of the Keycloak identity management and access control software is related to the handling of abnormally long scope parameters in the OpenID Connect mechanism. Exploiting this vulnerability could allow a malicious actor to trigger service failures...

CVE-2026-107370

The auth0-lock library is vulnerable to improper request handling during Active Directory logins. When a username consists of a domain without a local part, the library incorrectly initiates the authentication transaction using a GET request instead of a POST request. This causes sensitive user-s...

CVE-2026-107370 Improper Request Handling for Active Directory Logins in auth0-lock

When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters...

CVE-2026-107370

When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters...

Sidero Labs Talos Linux encryption vulnerability

Sidero Labs’ Talos Linux versions prior to 1.12.9, as well as versions 1.13.0 to 1.13.3, have a security vulnerability related to encryption. This vulnerability arises from the support packages generated by talosctl, which contain sensitive content from resources/registryconfigs.cri.talos.dev.yam...

CVE-2026-63316

A SQL injection vulnerability exists in Payload CMS due to the improper neutralization of user-provided input within the "in" and "not_in" query parameters. This flaw allows an authenticated attacker to execute arbitrary SQL commands. The issue was addressed in versions 3.90.0 and 4.0.0-canary.34...

CVE-2026-49264

A flaw was found in oauthlib. When JSON with Padding JSONP support is enabled on the token revocation endpoint, the application fails to validate user-supplied callback parameters before reflecting them into the response. A remote attacker could exploit this flaw by submitting a crafted callback...

PT-2026-113366

🚨 CVE-2026-107370 When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string...

CVE-2025-71431

Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP queries. Attackers can supply crafted LDAP filter syntax through these parameters to alter the resulting directory...

CVE-2026-109663 Frappe ERPNext before 15.113.0 SQL Injection via Unvalidated Endpoint Parameters

Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive informati...

CVE-2026-109663 Frappe ERPNext before 15.113.0 SQL Injection via Unvalidated Endpoint Parameters

Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive informati...

CVE-2025-71431

Frappe versions before 14.99.2 and 15.x before 15.86.0 are vulnerable to an LDAP injection vulnerability. This issue occurs because specific endpoints fail to sanitize user-supplied parameters used in LDAP queries. An attacker can provide crafted LDAP filter syntax through these parameters to man...