pyOpenSSL DTLS cookie callback buffer overflow

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Foreman: excessive permissions for viewer role on preview

HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

gRPC-Go has an authorization bypass via missing leading slash in :path

Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

Forman: foreman: remote code execution via command injection in websocket proxy

Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username

Foreman: command injection in foreman-rake database tasks

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification

c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property

Foreman: os command injection via ct_location and fcct_location parameters

Foreman: command injection in foreman-tail

Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)

Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

Foreman: ssti and insecure deserialization in foreman-rake configuration

Foreman: unauthenticated information disclosure via provisioning token validation flaw

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

Crash when handling long CNAME response in net

Pillow is vulnerable to a FITS GZIP decompression bomb

Incorrect parsing of IPv6 host literals in net/url

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown…

Pillow has an out-of-bounds write when loading PSD images

Memory exhaustion in query parameter parsing in net/url

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

AIOHTTP Vulnerable to Deserialization of Untrusted Data

Rubygem-hammer_cli: command injection via insecure editor invocation

Rubygem-katello: sql injection in registry proxy via labels

Foreman: foreman: unauthorized modification of host configurations via broken access control

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

Inefficient candidate hostname parsing in crypto/x509

Foreman: satellite: graphql api permission bypass leads to information disclosure

Rubygem-katello: katello: denial of service and potential information disclosure via sql injection

Potential SQL injection via QuerySet.order_by and FilteredRelation

Potential SQL injection in column aliases via control characters

Potential SQL injection via raster lookups on PostGIS

Rubygem-katello: improper authorization logic allows resource enumeration

Ketello: katello content view history api cross-organization authorization bypass

Foreman: foreman: information disclosure via improper validation of nested request parameters

Katello: missing repository authorization in content_uploads exposes cross-product content existence