24481 matches found
CVE-2026-71190
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...
CVE-2026-71190
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...
CVE-2026-71190
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...
Linux Distros Unpatched Vulnerability : CVE-2026-71190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The qdtext...
CVE-2026-16728
A flaw was found in undici. A malicious or faulty upstream server could send a partial response with incorrect length information. When undici's retry interceptor processes this, it may create a response body with a length that does not match the original Content-Length header. This can lead to...
CVE-2026-69192 vulnerabilities
Vulnerabilities for packages: lerna, wazuh-dashboard-fips, code-server, wazuh-dashboard, kubeflow-pipelines, renovate, actions-runner, unleash-fips, langfuse, unleash, prism, graalvm, unleash-proxy, kibana, sqlpad, langfuse-fips, opensearch-dashboards-fips, librechat, opensearch-dashboards, npm,...
CVE-2026-54272 vulnerabilities
Vulnerabilities for packages: lerna, wazuh-dashboard-fips, code-server, wazuh-dashboard, kubeflow-pipelines, renovate, actions-runner, unleash-fips, langfuse, unleash, prism, graalvm, unleash-proxy, kibana, sqlpad, langfuse-fips, opensearch-dashboards-fips, librechat, opensearch-dashboards, npm,...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: lerna, wazuh-dashboard-fips, code-server, wazuh-dashboard, kubeflow-pipelines, renovate, actions-runner, unleash-fips, langfuse, unleash, prism, graalvm, unleash-proxy, kibana, sqlpad, langfuse-fips, opensearch-dashboards-fips, librechat, opensearch-dashboards, npm,...
CVE-2026-69198 vulnerabilities
Vulnerabilities for packages: lerna, wazuh-dashboard-fips, code-server, wazuh-dashboard, kubeflow-pipelines, renovate, actions-runner, unleash-fips, langfuse, unleash, prism, graalvm, unleash-proxy, kibana, sqlpad, langfuse-fips, opensearch-dashboards-fips, librechat, opensearch-dashboards, npm,...
GHSA-MWP4-54F8-5FHR vulnerabilities
Vulnerabilities for packages: lerna, wazuh-dashboard-fips, code-server, wazuh-dashboard, kubeflow-pipelines, renovate, actions-runner, unleash-fips, langfuse, unleash, prism, graalvm, unleash-proxy, kibana, sqlpad, langfuse-fips, opensearch-dashboards-fips, librechat, opensearch-dashboards, npm,...
GHSA-4XRF-JV44-H6HH vulnerabilities
Vulnerabilities for packages: lerna, wazuh-dashboard-fips, code-server, wazuh-dashboard, kubeflow-pipelines, renovate, actions-runner, unleash-fips, langfuse, unleash, prism, graalvm, unleash-proxy, kibana, sqlpad, langfuse-fips, opensearch-dashboards-fips, librechat, opensearch-dashboards, npm,...
CVE-2026-18446 vulnerabilities
Vulnerabilities for packages: argo-workflows, librechat, langfuse, nextcloud-server, serve, vitess, opensearch-dashboards, prism, unleash-proxy, saf, arangodb, langfuse-fips, gemini-cli, yaml-language-server, opensearch-dashboards-fips, renovate...
GHSA-RGW5-RVV9-X895 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, vitess, arangodb, authentik-fips, ts-patch, wazuh-dashboard, gemini-cli, renovate, actions-runner, langfuse, rancher-api-ui, dotstatsuite-supercore, unleash, prism, pelias-api, argo-workflows, serve, nextcloud-server, foxx-cli, graalvm,...
GHSA-7P8R-X3MC-P8W7 vulnerabilities
Vulnerabilities for packages: argo-workflows, librechat, langfuse, nextcloud-server, serve, vitess, opensearch-dashboards, prism, unleash-proxy, saf, arangodb, langfuse-fips, gemini-cli, yaml-language-server, opensearch-dashboards-fips, renovate...
CVE-2026-69152 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, vitess, arangodb, authentik-fips, ts-patch, wazuh-dashboard, gemini-cli, renovate, actions-runner, langfuse, rancher-api-ui, dotstatsuite-supercore, unleash, prism, pelias-api, argo-workflows, serve, nextcloud-server, foxx-cli, graalvm,...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
EUVD-2026-52753
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...
ROOT-APP-NPM-GHSA-6X33-PW7P-HMPQ GHSA-6x33-pw7p-hmpq in http-proxy - Patched by Root
Root has patched GHSA-6x33-pw7p-hmpq in the http-proxy package for Root:npm. Multiple fixed versions available...