CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce Public Suffix List boundary checks while processing a Set-Cookie header. Specifically, if the Domain attribute explicitly matches an origin host that is a public suffix (e.g., Domain=co.uk set by co.uk), libcurl fails to coerce it into a st...

PT-2026-2934

Name of the Vulnerable Software and Affected Versions Outray versions prior to 0.1.5 Description A flaw exists in Outray that allows a user, even those on a free plan, to obtain more subdomains than permitted due to missing database transaction locks. Specifically, the issue resides in the API...