OpenResty -- multiple vulnerabilities in the bundled nginx core

The OpenResty developers report: The nginx core was upgraded from nginx 1.31.1 to 1.31.8, which incorporates 12 CVE fixes, grouped by the first fixed version: 1.31.2: HTTP/3 use-after-free CVE-2026-42530, HTTP/2 and gRPC upstream buffer overflow CVE-2026-42055, and charset conversion buffer...

nginx 1.25.0 < 1.30.6 / 1.31.x < 1.31.7 Request Body Injection

According to its Server response header, the installed version of nginx is 1.25.0 prior to 1.30.6 or 1.31.0 prior to 1.31.7. It is, therefore, affected by the following issue: - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with...

Request body injection in HTTP/3

Request body injection in HTTP/3 Severity: medium CVE-2026-95101 Not vulnerable: 1.31.7+, 1.30.6+ Vulnerable: 1.25.0-1.31.6...

CVE-2026-55603

A flaw was found in http-proxy-middleware. A remote attacker could exploit a vulnerability in the fixRequestBody function, which is used to re-emit a request body. By injecting carriage return and line feed characters \r\n into a request body key or value, an attacker can bypass security policies...

AZL-76373 CVE-2026-1467 affecting package libsoup for versions less than 3.4.4-12

A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF Carriage Return Line Feed Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-decoded input used to create the Host header. A remote attacker can exploit this by providing ...

CVE-2020-27218

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that ...