https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:43:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-217592 EUVD-2026-217592 https://cve.radiocsirt.org/vuln/euvd-2026-217592 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25069 <p>A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks.</p> <p>Since Kvrocks didn&#39;t detect if &#34;Host:&#34; or &#34;POST&#34; appears in RESP requests, a valid HTTP request can also be sent to Kvrocks as a valid RESP request and trigger some database operations, which can be dangerous when it is chained with SSRF.</p> <p>It is similiar to CVE-2016-10517 in Redis.</p> <p>This issue affects Apache Kvrocks: from the initial version to the latest version 2.11.0.</p> <p>Users are recommended to upgrade to version 2.11.1, which fixes the issue.</p> <p>A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks.</p> <p>Since Kvrocks didn&#39;t detect if &#34;Host:&#34; or &#34;POST&#34; appears in RESP requests, a valid HTTP request can also be sent to Kvrocks as a valid RESP request and trigger some database operations, which can be dangerous when it is chained with SSRF.</p> <p>It is similiar to CVE-2016-10517 in Redis.</p> <p>This issue affects Apache Kvrocks: from the initial version to the latest version 2.11.0.</p> <p>Users are recommended to upgrade to version 2.11.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25069 https://cve.radiocsirt.org/vuln/ghsa-fp9p-7hx8-xfp3 <p>A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks.</p> <p>Since Kvrocks didn&#39;t detect if &#34;Host:&#34; or &#34;POST&#34; appears in RESP requests, a valid HTTP request can also be sent to Kvrocks as a valid RESP request and trigger some database operations, which can be dangerous when it is chained with SSRF.</p> <p>It is similiar to CVE-2016-10517 in Redis.</p> <p>This issue affects Apache Kvrocks: from the initial version to the latest version 2.11.0.</p> <p>Users are recommended to upgrade to version 2.11.1, which fixes the issue.</p> <p>A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks.</p> <p>Since Kvrocks didn&#39;t detect if &#34;Host:&#34; or &#34;POST&#34; appears in RESP requests, a valid HTTP request can also be sent to Kvrocks as a valid RESP request and trigger some database operations, which can be dangerous when it is chained with SSRF.</p> <p>It is similiar to CVE-2016-10517 in Redis.</p> <p>This issue affects Apache Kvrocks: from the initial version to the latest version 2.11.0.</p> <p>Users are recommended to upgrade to version 2.11.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-fp9p-7hx8-xfp3