4068 matches found
SUSE CVE-2026-69664
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...
otp: inets: Erlang/OTP inets httpd: Denial of Service via malformed chunked HTTP request
A flaw was found in Erlang/OTP inets httpd. An unauthenticated remote attacker can exploit this vulnerability by sending a malformed chunked HTTP request. Specifically, if the chunk-size line is not a hexadecimal number and arrives separately from the headers, the server worker handling the reque...
PT-2026-84763
Name of the Vulnerable Software and Affected Versions NGINX JavaScript affected versions not specified Description A flaw in NGINX JavaScript allows a remote attacker to cause a denial-of-service DoS on the system. The issue occurs when the ngx.fetch function receives a malformed HTTP response an...
CVE-2026-69664
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...
AZL-98466 CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...
CVE-2026-69664
Erlang/OTP inets httpd contains a Missing Release of Resource after Effective Lifetime flaw that allows an unauthenticated remote attacker to cause denial of service. The root cause is in how httpd_request_handler:handle_info/2 handles a malformed chunk-size line arriving in a separate write from...
CVE-2026-69664 httpd parks a request worker indefinitely on a malformed chunk size sent after the headers
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...
CVE-2026-69664 httpd parks a request worker indefinitely on a malformed chunk size sent after the headers
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...
CVE-2026-69664
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...
CVE-2026-71380 httpd applies no timeout while receiving a request body, parking a worker on a stalled client
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...
CVE-2026-71380 httpd applies no timeout while receiving a request body, parking a worker on a stalled client
Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...
CVE-2026-71380
CVE-2026-71380 is a Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd . An unauthenticated remote attacker can trigger a denial of service by sending valid request headers declaring a large Content-Length and then stalling before the body is complete. In...
CLEANSTART-2026-HY79895 Security fixes in langfuse-worker 3.225.0-r1
Package langfuse-worker version 3.225.0-r1 fixes 11 vulnerabilities: CVE-2026-18446, CVE-2026-69192, CVE-2026-54272, CVE-2026-69198, ghsa-f88m-g3jw-g9cj...
CLEANSTART-2026-YJ84605 Security fixes in langfuse-worker 3.215.0-r1
Package langfuse-worker version 3.215.0-r1 fixes 28 vulnerabilities: ghsa-frvp-7c67-39w9, ghsa-p63j-vcc4-9vmv, ghsa-55q2-fjhq-7xh7, ghsa-c2j3-45gr-mqc4, CVE-2026-69192...
CLEANSTART-2026-TC67424 Security fixes in langfuse-worker 4.13.0-r1
Package langfuse-worker version 4.13.0-r1 fixes 10 vulnerabilities: CVE-2026-71850, CVE-2026-69207, CVE-2026-71848, CVE-2026-71849, CVE-2026-50159...
CLEANSTART-2026-KA88301 Security fixes in langfuse-worker 3.218.0-r1
Package langfuse-worker version 3.218.0-r1 fixes 29 vulnerabilities: ghsa-frvp-7c67-39w9, ghsa-p63j-vcc4-9vmv, ghsa-55q2-fjhq-7xh7, ghsa-c2j3-45gr-mqc4, CVE-2026-69192...
CLEANSTART-2026-OF14880 Security fixes in langfuse-worker 4.3.1-r2
Package langfuse-worker version 4.3.1-r2 fixes 2 vulnerabilities: CVE-2026-69207, CVE-2026-69153...
CLEANSTART-2026-ZB73544 Security fixes in langfuse-worker 3.224.0-r2
Package langfuse-worker version 3.224.0-r2 fixes 2 vulnerabilities: CVE-2026-14257, CVE-2026-69152...
CLEANSTART-2026-BH94852 Security fixes in langfuse-worker 3.224.1-r2
Package langfuse-worker version 3.224.1-r2 fixes 4 vulnerabilities: CVE-2026-14257, CVE-2026-69152, ghsa-r28c-9q8g-f849, CVE-2026-69153...