[SECURITY] Fedora 40 Update: python-quart-0.19.8-1.fc40

Quart is an async Python web microframework. Using Quart you can, * render and serve HTML templates, * write (RESTful) JSON APIs, * serve WebSockets, * stream request and response data, * d ...

Continue Reading
Security Bulletin: IBM Sterling Control Center is affected by vulnerability in Apache Tomcat

Summary OSS Scan Vulnerability - Apache Tomcat 8.5.70 & Apache Tomcat 8.5.75 with multiple CVEs and affecting Sterling Control Center v6.2.1. Vulnerability Details CVEID:CVE-2021-42340 DESCRIP ...

Continue Reading
CVE-2024-48059

gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebS ...

Continue Reading
CVE-2024-48059

gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebS ...

Continue Reading
CVE-2024-48059

gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebS ...

Continue Reading
Low: mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-20 ...

Continue Reading
Low: mod_http2 security update

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-20 ...

Continue Reading
Laravel Reverb Missing API Signature Verification

Impact A community member disclosed an issue where verification signatures for requests sent to Reverb's Pusher-compatible API were not being verified. This API is used in scenarios such as broad ...

Continue Reading

Back to Main

Subscribe for the latest news: