CVE-2026-114100

Coraza versions 3.0.4 through 3.8.1 are susceptible to a request body inspection bypass due to a flaw in how the request-body processor selects content types. The system performs an exact comparison of the Content-Type value; consequently, URL-encoded bodies that include media-type parameters (su...

CVE-2026-114100 Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type

Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compares the entire Content-Type value exactly, so URL-encoded bodies whose Content-Type carries a media-type parameter are never parsed. Unauthenticated attackers can send...

EUVD-2026-106903

Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compares the entire Content-Type value exactly, so URL-encoded bodies whose Content-Type carries a media-type parameter are never parsed. Unauthenticated attackers can send...

CVE-2026-114100

Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compares the entire Content-Type value exactly, so URL-encoded bodies whose Content-Type carries a media-type parameter are never parsed. Unauthenticated attackers can send...

CVE-2026-114093

Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by sending a link to the GET-based /logout endpoint. Attackers can lure victims into clicking an obfuscated, URL-encoded link that terminates their session,...

EUVD-2026-106896

Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by sending a link to the GET-based /logout endpoint. Attackers can lure victims into clicking an obfuscated, URL-encoded link that terminates their session,...

CVE-2026-114093 Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpoint

Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by sending a link to the GET-based /logout endpoint. Attackers can lure victims into clicking an obfuscated, URL-encoded link that terminates their session,...

CVE-2026-114093

Versions of Trigger.dev prior to 4.5.6 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability involving the GET-based /logout endpoint . A remote attacker can trick an authenticated user into clicking an obfuscated, URL-encoded link, which triggers an automatic logout. This action re...

CVE-2026-114093 Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpoint

Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by sending a link to the GET-based /logout endpoint. Attackers can lure victims into clicking an obfuscated, URL-encoded link that terminates their session,...

CVE-2026-114089

Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading /account/authorization-code/ mints a Personal Access Token without any consent step. Attackers mint an unauthenticated code, lure a logged-in user to that URL, then...

CVE-2026-114089 Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover

Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading /account/authorization-code/ mints a Personal Access Token without any consent step. Attackers mint an unauthenticated code, lure a logged-in user to that URL, then...

CVE-2026-114089

Trigger.dev versions prior to 4.5.2 are vulnerable to a Cross-Site Request Forgery (CSRF) flaw within the CLI authorization-code flow. The root cause is that accessing the /account/authorization-code/

CVE-2026-114089 Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover

Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading /account/authorization-code/ mints a Personal Access Token without any consent step. Attackers mint an unauthenticated code, lure a logged-in user to that URL, then...

EUVD-2026-106892

Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading /account/authorization-code/ mints a Personal Access Token without any consent step. Attackers mint an unauthenticated code, lure a logged-in user to that URL, then...

CLEANSTART-2026-GV93850 team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling

Security vulnerability affects the nodejs-24 package. The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling...

EUVD-2026-107015

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx...

CVE-2026-114062

SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,...

EUVD-2026-107013

SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,...

CVE-2026-114053

vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mmprocessorkwargs.coderevision to Transformers AutoProcessor.frompretrained, letting clients select which revision of a model's dynamic processor code is imported when trustremotecode is enabled. An attacker controlling a revision in the...

CVE-2026-114049 vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense

vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense that allows remote attackers to constrain other clients' outputs by leaving stale allowedtokenids rows. Attackers can submit concurrent constrained generate requests, including via unauthenticated /invocations, so recycl...