https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:58:59.619609+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ot47586 CLEANSTART-2026-OT47586 — Security fix for ghsa-2vqw-3mp8-cgmx applied in: logstash-fips 9.4.3-r1 2026-10-12T06:58:59.640488+00:00

Affected: CleanStart: logstash-fips

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cve-2026-47737 CVE-2026-47737 — Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections 2026-10-12T06:58:59.640544+00:00

Affected: puma

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when set_remote_address proxy_protocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive request on the same connection, allowing an attacker to inject a second PROXY header and overwrite REMOTE_ADDR. This issue is fixed in versions 7.2.1 and 8.0.2.