112705 matches found
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
Critical: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
Important: Red Hat Security Advisory: delve security update
An update for delve is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2026-0636
creationtimestamp| type| source ---|---|--- 2026-04-15 13:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjzi73hgl2t...
Security update for python311
This update for python311 fixes the following issues: Updated to Python 3.11.15 CVE-2025-6075: If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables bsc1252974. CVE-2025-11468: header injection when folding a long...
CVE-2026-3505
creationtimestamp| type| source ---|---|--- 2026-04-15 13:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjywbtahg2a 2026-04-15 15:20:23+00:00| published-proof-of-concept| Telegram/uZRx6HZozAc0thMR3KKbNyvZVgKIzeeLzgWMgVKyfbYH8EA 2026-05-04 04:00:43+00:00| seen|...
CVE-2025-40899
creationtimestamp| type| source ---|---|--- 2026-04-15 13:20:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjyeesk4e2o 2026-04-15 17:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjken4pvfd2a 2026-04-17 17:30:59+00:00| published-proof-of-concept|...
CVE-2026-40744
creationtimestamp| type| source ---|---|--- 2026-04-15 12:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjwtdlpfn2k 2026-04-16 17:20:51+00:00| seen| Telegram/s117pb2GT3VwdfXaV13Oi8Gqr-ePRyI5oBJZVU7ek3MbpQ 2026-04-18 18:00:10+00:00| seen|...
CVE-2026-40778
creationtimestamp| type| source ---|---|--- 2026-04-15 12:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjwkf526i2z...
CVE-2026-40786
creationtimestamp| type| source ---|---|--- 2026-04-15 12:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjvqslckj2g...
CVE-2026-40763
creationtimestamp| type| source ---|---|--- 2026-04-15 12:23:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjv6qetns2m...
golang-github-openprinting-ipp-usb security update
An update is available for golang-github-openprinting-ipp-usb. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list HTTP reverse proxy, backed by IPP-over-USB...
CVE-2026-40730
creationtimestamp| type| source ---|---|--- 2026-04-15 12:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjju5ggv4w2z...
CVE-2026-40737
creationtimestamp| type| source ---|---|--- 2026-04-15 12:03:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjju2qbful2z...
CVE-2026-29104
creationtimestamp| type| source ---|---|--- 2026-04-15 12:01:58+00:00| seen| https://bsky.app/profile/solomonneas.dev/post/3mjjtxtb55324...
Interpretation Conflict
Overview @fastify/express is an Express compatibility layer for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via improper URL normalization gaps. An attacker can gain unauthorized access to protected routes by manipulating the URL path with duplicate slashes...
CVE-2026-33808
Impact@fastify/express v4.0.4 and earlier fails to normalize URLs before passing them to Express middleware when Fastify router normalization options are enabled. This allows complete bypass of path-scoped authentication middleware via duplicate slashes when ignoreDuplicateSlashes is enabled, or...
CVE-2026-33808
Impact@fastify/express v4.0.4 and earlier fails to normalize URLs before passing them to Express middleware when Fastify router normalization options are enabled. This allows complete bypass of path-scoped authentication middleware via duplicate slashes when ignoreDuplicateSlashes is enabled, or...