io.undertow:undertow-http2-test-suite (1.2.0.beta9), io.undertow:undertow-servlet (1.2.0.beta9) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.2.0.beta9)

io.undertow:undertow-core MAVEN version 1.2.0.beta9 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta9 - io.undertow:undertow-servlet 1.2.0.beta9 -...

io.undertow:undertow-http2-test-suite (1.2.0.beta4), io.undertow:undertow-servlet (1.2.0.beta4) +2 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.2.0.beta4)

io.undertow:undertow-core MAVEN version 1.2.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta4 - io.undertow:undertow-servlet 1.2.0.beta4 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta8), io.undertow:undertow-servlet (1.3.0.beta8) +20 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.beta8)

io.undertow:undertow-core MAVEN version 1.3.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta8 - io.undertow:undertow-servlet 1.3.0.beta8 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta5), io.undertow:undertow-servlet (1.3.0.beta5) +10 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.beta5)

io.undertow:undertow-core MAVEN version 1.3.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta5 - io.undertow:undertow-servlet 1.3.0.beta5 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta7), io.undertow:undertow-servlet (1.3.0.beta7) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.beta7)

io.undertow:undertow-core MAVEN version 1.3.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta7 - io.undertow:undertow-servlet 1.3.0.beta7 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta10), io.undertow:undertow-servlet (1.3.0.beta10) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.beta10)

io.undertow:undertow-core MAVEN version 1.3.0.beta10 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta10 - io.undertow:undertow-servlet 1.3.0.beta10 -...

io.undertow:undertow-http2-test-suite (1.1.0.beta8), io.undertow:undertow-servlet (1.1.0.beta8) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.1.0.beta8)

io.undertow:undertow-core MAVEN version 1.1.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta8 - io.undertow:undertow-servlet 1.1.0.beta8 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta11), io.undertow:undertow-servlet (1.3.0.beta11) +20 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.beta11)

io.undertow:undertow-core MAVEN version 1.3.0.beta11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta11 - io.undertow:undertow-servlet 1.3.0.beta11 -...

io.undertow:undertow-http2-test-suite (1.1.0.beta7), io.undertow:undertow-servlet (1.1.0.beta7) +3 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.1.0.beta7)

io.undertow:undertow-core MAVEN version 1.1.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta7 - io.undertow:undertow-servlet 1.1.0.beta7 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta13), io.undertow:undertow-servlet (1.3.0.beta13) +20 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.beta13)

io.undertow:undertow-core MAVEN version 1.3.0.beta13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta13 - io.undertow:undertow-servlet 1.3.0.beta13 -...

com.fizzed:ninja-undertow (>=5.3.1.undertow1, <=5.3.1.undertow2), io.undertow:undertow-http2-test-suite (1.3.17.final) +4 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.17.final)

io.undertow:undertow-core MAVEN version 1.3.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fizzed:ninja-undertow =5.3.1.undertow1, =1.1.7, =2.0.0-beta-2 -...

io.inkstand:inkstand-deployment-resteasy (>=0.1.1, <=0.1.2), io.inkstand:inkstand-http-undertow (>=0.1.1, <=0.1.2) +8 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.2.0.beta3)

io.undertow:undertow-core MAVEN version 1.2.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.inkstand:inkstand-deployment-resteasy =0.1.1, =0.1.1, =0.0.1, =0.0.1, =4.0.0, =1.0.0.alpha11,...

io.undertow:undertow-http2-test-suite (1.3.13.final), io.undertow:undertow-servlet (1.3.13.final) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.13.final)

io.undertow:undertow-core MAVEN version 1.3.13.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.13.final - io.undertow:undertow-servlet 1.3.13.final -...

io.undertow:undertow-http2-test-suite (1.3.0.cr3), io.undertow:undertow-servlet (1.3.0.cr3) +1 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.cr3)

io.undertow:undertow-core MAVEN version 1.3.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr3 - io.undertow:undertow-servlet 1.3.0.cr3 -...

io.undertow:undertow-http2-test-suite (1.3.0.cr1), io.undertow:undertow-servlet (1.3.0.cr1) +49 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.cr1)

io.undertow:undertow-core MAVEN version 1.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr1 - io.undertow:undertow-servlet 1.3.0.cr1 -...

co.paralleluniverse:comsat-test-utils (0.2.0), io.undertow:undertow-servlet (1.1.0.beta5) +2 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.1.0.beta5)

io.undertow:undertow-core MAVEN version 1.1.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-test-utils 0.2.0 - io.undertow:undertow-servlet 1.1.0.beta5 -...

PT-2026-45327

Split RPM specs according to Fedora kmod packaging guidelines, one spec for kmod, one for userspace - Import modsign macros if requested by the module build - Make lkrg into a meta package which pulls lkrg-kmod and the systemd unit definition - Add lkrg test module for testing and demonstrating...

Towards Leveraging LLMs to Generate Abstract Penetration Test Cases from Software Architecture

Software architecture models capture early design decisions that strongly influence system quality attributes, including security. However, architecture-level security assessment and feedback are often absent in practice, allowing security weaknesses to propagate into later phases of the software...

CVE-2026-33502

WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated server-side request forgery vulnerability in plugin/Live/test.php allows any remote user to make the AVideo server send HTTP requests to arbitrary URLs. This can be used to probe...

SUSE-SU-2026:0976-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 bsc1255111, jscSLE-18320: - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints bsc1259266. - CVE-2026-27138:...