net: rds: clear i_sends on setup unwind

...

PT-2026-54957

liboauth2 is vulnerable to Server-Side Request Forgery in oauth2 jose jwks aws alb resolve function. The AWS ALB verifier reads both signer and kid from the unverified JWT header. If signer matches the configured ARN, kid is appended to alb base url without URL encoding or path sanitization, and...

PT-2026-55438

It was discovered that the nghttp2 nghttpx proxy incorrectly handled HTTP/1.1 Upgrade requests that included a Content-Length header and body. A remote attacker could possibly use this issue to perform HTTP request and response smuggling attacks against backend services...

TencentOS Server 2: sssd (TSSA-2025:1027)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:1027 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

PT-2026-55418

Summary When MySQL or PostgreSQL service bindings from VCAP SERVICES include TLS client credentials, the Connectors library writes those credentials to temporary files in Path.GetTempPath using File.CreateText. On Linux, File.CreateText creates files with mode 0644 world-readable under the proces...

PT-2026-55493

Name of the Vulnerable Software and Affected Versions WP Import Export Lite versions prior to 3.9.31 Description An issue exists in the wpie import upload file from url AJAX action. The plugin initially uses wp safe remote get to download files, which blocks private IP ranges. However, if this ca...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.8.3-20.0.5, <=0.10.0-20.0.5), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.8.3-20.0.5, <=0.10.0-20.0.5) +14 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (20.0.5)

org.keycloak:keycloak-services MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =0.8.3-20.0.5, =0.8.3-20.0.5, =0.10.0-20.0.5 -...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +128 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (>=26.0.0, <=26.6.3)

org.keycloak:keycloak-services MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =1.0.0, =4.1.0-26.0, =4.1.0-26.0, =5.7.2 and more Source cves: CVE-2026-9795 Source advisory: OSV:GHSA-32H4-44JJ-C5VX...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +128 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (>=26.0.0, <=26.6.3)

org.keycloak:keycloak-services MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =1.0.0, =4.1.0-26.0, =4.1.0-26.0, =5.7.2 and more Source cves: CVE-2026-9795 Source advisory: GHSA-32H4-44JJ-C5VX...

fr.cnieg.keycloak:attribute-login-provider (1.4.11), io.phasetwo.keycloak:keycloak-events (>=0.30, <=0.33) +19 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (25.0.0)

org.keycloak:keycloak-services MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.11 - io.phasetwo.keycloak:keycloak-events =0.30,...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.5.3-23.0, <=2.5.5-23.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.3-23.0, <=2.5.5-23.0) +24 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (23.0.7)

org.keycloak:keycloak-services MAVEN version 23.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.5.3-23.0, =2.5.3-23.0, =0.58, =0.66 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.4), io.phasetwo.keycloak:keycloak-events (>=0.27, <=0.28) +18 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (24.0.0)

org.keycloak:keycloak-services MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.4 - io.phasetwo.keycloak:keycloak-events =0.27,...

fr.cnieg.keycloak:attribute-login-provider (1.4.5), io.github.opentdf.keycloak:keycloak-opentdf-extension (1.1.0) +28 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (24.0.1)

org.keycloak:keycloak-services MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.5 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.5.6-24.0, <=2.7.4-24.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=2.7.4-24.0) +24 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (24.0.2)

org.keycloak:keycloak-services MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.5.6-24.0, =2.5.6-24.0, =0.4, =0.6 -...

com.kleegroup.accelerator:accelerator-message-keycloakbrevo (>=1.0.1, <=1.0.2), com.kleegroup.accelerator:accelerator-security-keycloakmfa (1.0.1) +17 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (24.0.3)

org.keycloak:keycloak-services MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.kleegroup.accelerator:accelerator-message-keycloakbrevo =1.0.1, =1.4.7, =1.4.8 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.9), io.github.shahrear002:keycloak-universal-sms (>=1.0.0, <=1.0.1) +22 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (24.0.4)

org.keycloak:keycloak-services MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.9 - io.github.shahrear002:keycloak-universal-sms...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=3.0.1-25.0, <=4.0.1-25.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0) +25 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (25.0.1)

org.keycloak:keycloak-services MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =3.0.1-25.0, =3.0.1-25.0, =4.0.1-25.0 -...

de.adorsys.sts:keycloak-storage-provider (>=1.2.0, <=1.2.4), net.optionfactory.keycloak:optionfactory-keycloak-apple-identity-provider (>=6.5, <=6.9) +23 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (25.0.2)

org.keycloak:keycloak-services MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.2.0, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5,...

org.keycloak:keycloak-crypto-fips1402 (25.0.3), org.keycloak:keycloak-dependencies-server-all (25.0.3) +12 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (25.0.3)

org.keycloak:keycloak-services MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-crypto-fips1402 25.0.3 - org.keycloak:keycloak-dependencies-server-all 25.0....

de.arbeitsagentur.opdt:keycloak-cassandra-extension (4.0.2-25.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0) +22 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (25.0.4)

org.keycloak:keycloak-services MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension 4.0.2-25.0 -...