45 matches found
MINI-F26J-8WCR-52X7
Bulletin has no description...
MINI-WJC2-FCFC-Q89X
Bulletin has no description...
SUSE CVE-2026-55149
Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the authrequest module. Prior to 0.48.0, Cookie in pkg/cookie/cookie.go parses the total part count from an attacker-controlled multipart cookie name and passes the value to makestring, numParts without checking that the value is...
SUSE CVE-2026-57497
webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNextCapsule in session.go skips an unknown WebTransport capsule on the HTTP/3 request stream by calling io.ReadAll on the capsule reader, retaining the complete declared capsule body in memory. A...
MINI-7X2C-98M5-XQC3
Bulletin has no description...
MINI-J8HR-W43J-JFMR
Bulletin has no description...
MINI-2JGR-5HMQ-J64P
Bulletin has no description...
SUSE CVE-2026-71223
unknown...
SUSE CVE-2026-80229
When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
MINI-PJQ7-6P5H-FJH7
Bulletin has no description...
SUSE CVE-2026-82209
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
SUSE CVE-2026-49275
unknown...
SUSE CVE-2026-68546
unknown...
MINI-FV5R-3X4V-8W5C
Bulletin has no description...
MINI-F9W4-GWRP-X5HR
Bulletin has no description...
MINI-V8J4-G582-Q625
Bulletin has no description...
SUSE CVE-2026-75033
A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the...
SUSE CVE-2026-75034
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...
SUSE CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...