https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:41:50 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0724 certfr-2025-avi-0724 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0724 https://cve.radiocsirt.org/vuln/cleanstart-2026-bc28327 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: thingsboard-tb-web-ui</p> <p>Package thingsboard-tb-web-ui version 4.1-r1 fixes 3 vulnerabilities: ghsa-r4q5-vmmm-2653, ghsa-76c9-3jph-rj3q, CVE-2025-7339</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: thingsboard-tb-web-ui</p> <p>Package thingsboard-tb-web-ui version 4.1-r1 fixes 3 vulnerabilities: ghsa-r4q5-vmmm-2653, ghsa-76c9-3jph-rj3q, CVE-2025-7339</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bc28327 https://cve.radiocsirt.org/vuln/euvd-2026-247815 EUVD-2026-247815 https://cve.radiocsirt.org/vuln/euvd-2026-247815 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7339 <p>on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `&lt;1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.</p> <p>on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `&lt;1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7339 https://cve.radiocsirt.org/vuln/ghsa-76c9-3jph-rj3q <p><strong>Affected:</strong> npm: on-headers</p> <p>### Impact</p> <p>A bug in on-headers versions `&lt; 1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`</p> <p>### Patches</p> <p>Users should upgrade to `1.1.0`</p> <p>### Workarounds</p> <p>Uses are encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.</p> <p><strong>Affected:</strong> npm: on-headers</p> <p>### Impact</p> <p>A bug in on-headers versions `&lt; 1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`</p> <p>### Patches</p> <p>Users should upgrade to `1.1.0`</p> <p>### Workarounds</p> <p>Uses are encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.</p> https://cve.radiocsirt.org/vuln/ghsa-76c9-3jph-rj3q https://cve.radiocsirt.org/vuln/msrc_cve-2025-7339 msrc_CVE-2025-7339 https://cve.radiocsirt.org/vuln/msrc_cve-2025-7339 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20919-1 <p>Security update for agama-web-ui</p> <p>Security update for agama-web-ui</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:20919-1 https://cve.radiocsirt.org/vuln/rhsa-2025:21704 <p>follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor follow-redirects: Exposure of Sensitive Information via Authorization Header leak golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html brace-expansion: juliangruber brace-expansion index.js expand redos on-headers: on-headers vulnerable to http response header manipulation form-data: Unsafe random function in form-data golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh</p> <p>follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor follow-redirects: Exposure of Sensitive Information via Authorization Header leak golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html brace-expansion: juliangruber brace-expansion index.js expand redos on-headers: on-headers vulnerable to http response header manipulation form-data: Unsafe random function in form-data golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh</p> https://cve.radiocsirt.org/vuln/rhsa-2025:21704 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7339 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-on-headers, Ubuntu:18.04:LTS: node-on-headers, Ubuntu:20.04:LTS: node-on-headers, Ubuntu:22.04:LTS: node-on-headers, Ubuntu:24.04:LTS: node-on-headers, Ubuntu:25.10: node-on-headers, Ubuntu:26.04:LTS: node-on-headers</p> <p>on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `&lt;1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-on-headers, Ubuntu:18.04:LTS: node-on-headers, Ubuntu:20.04:LTS: node-on-headers, Ubuntu:22.04:LTS: node-on-headers, Ubuntu:24.04:LTS: node-on-headers, Ubuntu:25.10: node-on-headers, Ubuntu:26.04:LTS: node-on-headers</p> <p>on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `&lt;1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7339 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1929 <p>Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1929