CVE-2026-42945

CVE-2026-42945: NGINX Rift Heap Buffer Overflow Vulnerability Overview CVE-2026-42945 is a critical heap buffer overflow vulnerability in the NGINX server, known as "NGINX Rift". The vulnerability exists in the processing logic of the rewrite and set directives in NGINX. When specific configurati...

PT-2026-39322

Name of the Vulnerable Software and Affected Versions Velocity.js versions prior to 2.1.6 Description A prototype pollution issue exists during the processing of set directives in Velocity templates. This occurs because the engine accepts arbitrary path keys and performs assignments without...