254 matches found
CLEANSTART-2026-QS71019 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Security vulnerability affects the trust-manager package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
CLEANSTART-2026-PC03201 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Security vulnerability affects the zookeeper-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
Amazon Linux 2 : rclone (ALAS-2026-4081)
The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4081 advisory. rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from...
CLEANSTART-2026-ND67671 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Security vulnerability affects the rabbitmq-cluster-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
CLEANSTART-2026-CB70902 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Security vulnerability affects the prometheus-node-exporter-fips package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
CLEANSTART-2026-LI28243 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
CVE-2026-78659 affects multiple packages. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request. See references for individual vulnerability details...
CLEANSTART-2026-IS44284 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
CVE-2026-78659 affects multiple packages. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request. See references for individual vulnerability details...
CLEANSTART-2026-VE92591 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
CVE-2026-78659 affects multiple packages. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request. See references for individual vulnerability details...
Important: amazon-cloudwatch-agent
Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...
Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2026-3350)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3350 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates...
Important: amazon-cloudwatch-agent
Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...
CLEANSTART-2026-JH92059 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
CVE-2026-78659 affects multiple packages. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request. See references for individual vulnerability details...
Amazon Linux 2023 : ecs-init (ALAS2023-2026-3321)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3321 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each ent...
Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-3264)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3264 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...
Amazon Linux 2023 : nerdctl (ALAS2023-2026-3274)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3274 advisory. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global...
Amazon Linux 2 : ecs-init (ALASECS-2026-149)
The version of ecs-init installed on the remote host is prior to 1.108.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-149 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer m...
Amazon Linux 2023 : soci-snapshotter (ALAS2023-2026-3270)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3270 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...
Amazon Linux 2023 : captree, libcap, libcap-devel (ALAS2023-2026-3255)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3255 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...
Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-3271)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3271 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...
Amazon Linux 2023 : oci-add-hooks (ALAS2023-2026-3272)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3272 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...