Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 22:34:43 +0000 CVE-2026-67435 — linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect https://cve.radiocsirt.org/vuln/cve-2026-67435 <p><strong>Affected:</strong> Linuxfabrik monitoring-plugins</p> <p>linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() followed cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, allowing a malicious redirect-capable server to receive headers such as X-Auth-Token from authenticated monitoring requests. This issue is fixed in version 6.0.0.</p> <p><strong>Affected:</strong> Linuxfabrik monitoring-plugins</p> <p>linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() followed cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, allowing a malicious redirect-capable server to receive headers such as X-Auth-Token from authenticated monitoring requests. This issue is fixed in version 6.0.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-67435