GHSA-C57F-MM3J-27Q9 Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

Summary Requesting a static JS/CSS resource from the astro path with an incorrect or malformed if-match header returns a 500 error with a one-year cache lifetime instead of 412 in some cases. As a result, all subsequent requests to that file — regardless of the if-match header — will be served a...

CVE-2026-6019

creationtimestamp| type| source ---|---|--- 2026-04-23 14:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk67gae64g2b 2026-06-23 12:01:34+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe4mppew2g 2026-06-27 16:32:12+00:00| seen|...

CVE-2025-58226

creationtimestamp| type| source ---|---|--- 2026-04-23 11:38:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-58226.yaml 2026-04-25 21:03:13+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukgv3w2f...

CVE-2026-41640

creationtimestamp| type| source ---|---|--- 2026-04-23 09:30:40+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-41640.yaml 2026-04-24 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeo6kxw2t 2026-05-07...

CVE-2026-40924 vulnerabilities

Vulnerabilities for packages: tekton-chains, tekton-pipelines, tkn...

CVE-2026-33277

creationtimestamp| type| source ---|---|--- 2026-04-22 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN57877356 2026-04-27 00:22:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkgsi5pxr72z 2026-04-27 03:00:31+00:00| seen|...

CVE-2026-41468

creationtimestamp| type| source ---|---|--- 2026-04-22 20:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4bz7iiyc2k 2026-04-22 21:21:17+00:00| published-proof-of-concept| Telegram/he0Z1Xxb4PMjQ5eYVBKNYLHtJZg-G0d3XJmG72co7nWMuw 2026-04-23 09:00:28+00:00| seen|...

CVE-2026-31508

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before teardown completes The patch cited in the Fixes tag below changed the teardown code for OVS ports to no longer unconditionally take the RTNL. After this change, the netdevdestroy...

CVE-2026-35368

creationtimestamp| type| source ---|---|--- 2026-04-22 19:03:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk46smokds2l 2026-04-22 19:23:16+00:00| seen| Telegram/y1XO5mBm2flLcrjS5YpFLtlumq47M984z8tJCHSwnxFgvg 2026-04-29 16:48:01+00:00| seen|...

CVE-2026-33594

A flaw was found in PowerDNS DNSdist. A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buffer that will not be released until the end of the connection...

CVE-2026-31459

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix paramctx leak on damonsysfsnewtestctx failure Patch series "mm/damon/sysfs: fix memory leak and NULL dereference issues", v4. DAMONSYSFS can leak memory under allocation failure, and do NULL pointer dereferenc...

CVE-2018-25265

creationtimestamp| type| source ---|---|--- 2026-04-22 16:35:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3wis6de62v 2026-05-31 07:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mn52mjrfc72v...

DEBIAN-CVE-2026-31451

In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio Replace BUGON with proper error handling when inline data size exceeds PAGESIZE. This prevents kernel panic and allows the system to continue running while...

CVE-2026-31489

In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path mesonspiccprobe registers the controller with devmspiregistercontroller, so teardown already drops the controller reference via devm cleanup. Calling spicontrollerput again in...

CVE-2026-31526

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs processbpfexitfull passes checklock = !curframe to checkresourceleak, which is false in cases when bpfthrow is called from a static subprog. This makes checkresourceleak to skip...

CVE-2026-31520

In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in applereportfixup The applereportfixup function was returning a newly kmemdup-allocated buffer, but never freeing it. The caller of reportfixup does not take ownership of the returned pointer, but ...

CVE-2026-31495

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use netlink policy range checks Replace manual range and mask validations with netlink policy annotations in ctnetlink code paths, so that the netlink core rejects invalid values early and can generate extac...

RHSA-2025:7505

creationtimestamp| type| source ---|---|--- 2026-04-22 13:15:32+00:00| seen| Telegram/YPnShX-Sf1dcZiYy4mQ8RUtY6bJ9zloml3KU4dFfq-qF8yY...

CVE-2026-6848

creationtimestamp| type| source ---|---|--- 2026-04-22 13:08:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3kxbqt2x2q...

CVE-2025-3922

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...