https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:20:10 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-de16221 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: ruby-fluentd-1.18</p> <p>Multiple security vulnerabilities affect the ruby-fluentd-1.18 package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: ruby-fluentd-1.18</p> <p>Multiple security vulnerabilities affect the ruby-fluentd-1.18 package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-de16221 https://cve.radiocsirt.org/vuln/euvd-2026-338882 EUVD-2026-338882 https://cve.radiocsirt.org/vuln/euvd-2026-338882 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54171 <p>Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon&#39;s RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial request includes header information that is not intended for the new target. This issue is fixed in version 1.5.0.</p> <p>Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon&#39;s RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial request includes header information that is not intended for the new target. This issue is fixed in version 1.5.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54171 https://cve.radiocsirt.org/vuln/ghsa-48rx-c7pg-q66r <p><strong>Affected:</strong> RubyGems: excon</p> <p>### Impact The redirect follower middleware previously failed to strip a number of headers that are known to be sensitive and did not provide a way to provide a custom list of headers to strip.</p> <p>_What kind of vulnerability is it? Who is impacted?_ This could cause inadvertent leakage of sensitive data for users of the RedirectFollower middleware in cases where the initial request includes header information that is not intended for the new target.</p> <p>### Patches Patch exists and is released in v1.5.0</p> <p>### Workarounds Users can backport the [fix](https://github.com/excon/excon/commit/ea89a35308a12f4b791b6c50f2cbd33f94889fa3) to a custom redirect follower middleware.</p> <p><strong>Affected:</strong> RubyGems: excon</p> <p>### Impact The redirect follower middleware previously failed to strip a number of headers that are known to be sensitive and did not provide a way to provide a custom list of headers to strip.</p> <p>_What kind of vulnerability is it? Who is impacted?_ This could cause inadvertent leakage of sensitive data for users of the RedirectFollower middleware in cases where the initial request includes header information that is not intended for the new target.</p> <p>### Patches Patch exists and is released in v1.5.0</p> <p>### Workarounds Users can backport the [fix](https://github.com/excon/excon/commit/ea89a35308a12f4b791b6c50f2cbd33f94889fa3) to a custom redirect follower middleware.</p> https://cve.radiocsirt.org/vuln/ghsa-48rx-c7pg-q66r https://cve.radiocsirt.org/vuln/msrc_cve-2026-54171 msrc_CVE-2026-54171 https://cve.radiocsirt.org/vuln/msrc_cve-2026-54171 https://cve.radiocsirt.org/vuln/oesa-2026-3100 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: rubygem-excon, openEuler:22.03-LTS-SP4: rubygem-excon, openEuler:24.03-LTS-SP1: rubygem-excon, openEuler:24.03-LTS-SP3: rubygem-excon, openEuler:24.03-LTS-SP4: rubygem-excon</p> <p>EXtended http(s) CONnections. Security Fix(es):</p> <p>Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon&amp;apos;s RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial request includes header information that is not intended for the new target. This issue is fixed in version 1.5.0.(CVE-2026-54171)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: rubygem-excon, openEuler:22.03-LTS-SP4: rubygem-excon, openEuler:24.03-LTS-SP1: rubygem-excon, openEuler:24.03-LTS-SP3: rubygem-excon, openEuler:24.03-LTS-SP4: rubygem-excon</p> <p>EXtended http(s) CONnections. Security Fix(es):</p> <p>Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon&amp;apos;s RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial request includes header information that is not intended for the new target. This issue is fixed in version 1.5.0.(CVE-2026-54171)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3100 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54171 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-excon, Ubuntu:18.04:LTS: ruby-excon, Ubuntu:20.04:LTS: ruby-excon, Ubuntu:22.04:LTS: ruby-excon, Ubuntu:24.04:LTS: ruby-excon, Ubuntu:26.04:LTS: ruby-excon</p> <p>Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon&#39;s RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial request includes header information that is not intended for the new target. This issue is fixed in version 1.5.0.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-excon, Ubuntu:18.04:LTS: ruby-excon, Ubuntu:20.04:LTS: ruby-excon, Ubuntu:22.04:LTS: ruby-excon, Ubuntu:24.04:LTS: ruby-excon, Ubuntu:26.04:LTS: ruby-excon</p> <p>Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon&#39;s RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial request includes header information that is not intended for the new target. This issue is fixed in version 1.5.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54171