Use-after-free of a server-side SSLContext when sni_callback switches contexts
CVE-2026-19445
Use-after-free of a server-side SSLContext when sni_callback switches contexts
2026-10-04 归档
今日共收录 931 条安全情报，包含 128 个 CVE，457 篇安全通告，以及 95 篇研究论文。
← 返回归档列表SSLContext.wrap_bio() missing validation of server_hostname parameter
CVE-2026-19553
SSLContext.wrap_bio() missing validation of server_hostname parameter
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
CVE-2026-12345
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
virtualenv bash and fish activation scripts execute commands embedded in paths
CVE-2026-102925
virtualenv bash and fish activation scripts execute commands embedded in paths
virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
CVE-2026-102930
virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
CVE-2026-97689
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env
CVE-2026-102992
piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env
Werkzeug safe_join() allows Windows special device names
CVE-2026-102598
Werkzeug safe_join() allows Windows special device names
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
CVE-2026-97687
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
virtualenv: Command injection via --prompt in activate.bat (batch activator)
CVE-2026-102937
virtualenv: Command injection via --prompt in activate.bat (batch activator)
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove o
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
CVE-2026-102559
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
CVE-2026-102556
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
CVE-2026-102555
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
CVE-2026-102558
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
CVE-2026-102557
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
CVE-2026-102560
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
Integer Overflow or Wraparound and Out-of-bounds Write in compress
CVE-2026-63209
Integer Overflow or Wraparound and Out-of-bounds Write in compress
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.
CVE-2026-101276
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
CVE-2026-72897
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake