CVE-2026-54605

OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumertokenrequest parses the raw Location header of a 300 to 399 redirect returned by the OAuth server and follows the redirect recursively, which can mutate the consumer's...

CVE-2026-54605

OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumertokenrequest parses the raw Location header of a 300 to 399 redirect returned by the OAuth server and follows the redirect recursively, which can mutate the consumer's...

CVE-2026-54605

Summary: CVE-2026-54605 affects the Ruby OAuth gem (versions 0.5.5–1.1.5). The flaw in OAuth::Consumer#token_request follows 300–399 redirects by parsing the raw Location header and recursing, which can mutate the gem’s site/configuration and disclose signed OAuth request metadata (including the ...

CVE-2026-64648

A flaw was found in Next.js. A remote attacker could exploit a vulnerability in the server-side fetch mechanism, where a request with a body might receive a cached response intended for a different request to the same URL but different body. This could lead to the unauthorized disclosure of...

CVE-2026-56537

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

EUVD-2026-49182

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

CVE-2026-56537

HCL Connections is affected by CVE-2026-56537, a information disclosure vulnerability caused by improper handling of request data. The issue is labeled as a LOW-severity concern (CVSS v3.1: 3.5) with network attack vector, low attack complexity, and user interaction required. It could allow an au...

CVE-2026-56537 HCL Connections is vulnerable to information disclosure

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

CVE-2026-56537

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

CVE-2026-56537 HCL Connections is vulnerable to information disclosure

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

PT-2026-64899

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

CVE-2026-56537: Generation of Error Message Containing Sensitive Information

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

hono/jsx does not isolate context per request, leading to cross-request data disclosure

Summary hono/jsx did not isolate context values per request during server-side rendering. While an async component was suspended on await, its provided context value stayed observable to other requests rendering concurrently, so useContext could return a value from a different in-flight request...

EUVD-2026-42326

hono/jsx does not isolate context per request, leading to cross-request data disclosure...

GHSA-HVRM-45R6-MJFJ hono/jsx does not isolate context per request, leading to cross-request data disclosure

Summary hono/jsx did not isolate context values per request during server-side rendering. While an async component was suspended on await, its provided context value stayed observable to other requests rendering concurrently, so useContext could return a value from a different in-flight request...

NPM: hono/jsx does not isolate context per request, leading to cross-request data disclosure

NPM: hono/jsx does not isolate context per request, leading to cross-request data disclosure vulnerability discovered by ? in WordPress Npm hono versions = 4.11.8, 4.12.27...

EUVD-2026-44823

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP...

CVE-2026-63175

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP...

PT-2026-60329

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP...

Race Condition

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Race Condition through server-side rendering context handling in createContext and useContext. An attacker can read another in-flight request’s provided value by causing an async componen...