CVE-2026-10725

CVE-2026-10725 affects Protocol::HTTP2 for Perl up to version 1.12. The vulnerability stems from the inbound HPACK path having no header-list size limit, allowing a small HTTP/2 request to expand into large server memory (the HTTP/2 bomb). The headers_decode method copies a full key+value per ind...

Puppet 安全漏洞

Puppet is a set of configuration management tools based on the client/server C/S architecture from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Agent is a Puppet agent end-program. A security...

[Full-Disclosure] [SECURITY] [DSA 605-1] New viewcvs packages fix information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...