CVE-2026-82209

libcurl built with libpsl support fails to enforce the Public Suffix List boundary check when a Set-Cookie header's Domain attribute explicitly matches an origin host that is itself a public suffix (e.g., Domain=co.uk set by co.uk). Instead of coercing the cookie to host-only scope, libcurl store...

PT-2026-2934

Name of the Vulnerable Software and Affected Versions Outray versions prior to 0.1.5 Description A flaw exists in Outray that allows a user, even those on a free plan, to obtain more subdomains than permitted due to missing database transaction locks. Specifically, the issue resides in the API...