CVE-2026-10725

The Protocol::HTTP2 Perl module (versions before 1.13 ) is vulnerable to an HTTP/2 Bomb attack. The root cause is that the inbound HPACK path lacks a header-list size limit, allowing a small HTTP/2 request to expand into large amounts of server memory. Specifically, the headers_decode method crea...

Puppet 安全漏洞

Puppet is a set of configuration management tools based on the client/server C/S architecture from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Agent is a Puppet agent end-program. A security...

[Full-Disclosure] [SECURITY] [DSA 605-1] New viewcvs packages fix information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...