Search: 18.8.3.2

An improper certificate validation vulnerability exists in the OpenVPN 3 Core library versions 3.4 through 3.11.7. This flaw allows attackers to bypass extended key usage restrictions, potentially undermining the security guarantees of certificate-based authentication.

A vulnerability in Hatch's virtualenv activation scripts allows code execution when the environment path or prompt contains certain placeholder names. This occurs because the activation template substitution process rewrites quoted literals containing later placeholders, enabling injected code to run upon environment activation. The issue affects versions from 1.12.0 up to but not including 1.18.1_1 and is fixed in 1.18.1_1.

A command injection vulnerability exists in hatch's virtualenv activate.fish script due to improper quoting of paths or prompts containing backslashes before quotes. This allows crafted environment variables or directory names to execute arbitrary commands when sourcing activate.fish. The issue affects hatch versions >=1.2.0 <1.6.2 and >=1.9.3 <1.18.1_1 and is fixed in versions 1.6.2 and 1.18.1_1.

A command injection vulnerability exists in the hatch virtualenv activate script when used with zsh shells that have the PROMPT_SUBST option enabled. The vulnerability allows execution of arbitrary commands embedded in the environment name, which is used unescaped in the shell prompt. This affects hatch versions prior to 1.6.2 and 1.18.1_2. The issue is fixed in versions 1.6.2 and 1.18.1_2.

A command injection vulnerability exists in the bash activate script of the Hatch virtual environment tool. The script improperly escapes environment names containing backslashes before dollar signs, allowing attacker-controlled environment names to execute arbitrary commands in the user's shell prompt. This affects Hatch versions >=1.2.0 <1.6.2 and >=1.9.3 <1.18.1_2. The issue is fixed in versions 1.6.2 and 1.18.1_2.

A vulnerability in virtualenv's safe_delete() error handler can cause the permissions of a symlink target to be changed incorrectly during deletion recovery. When unlinking a symlink fails inside a read-only directory, the handler uses lstat() to get mode bits but applies them with chmod(), which follows the symlink and changes the target's mode. This can widen permissions on the target file if owned by the invoking user, potentially allowing other accounts to access it if parent directories are traversable. The issue affects virtualenv versions from 1.18.0_1 up to but not including 1.18.1_2 and was fixed in 1.18.1_2.

A vulnerability in virtualenv allows attacker-controlled destination paths to be interpreted as shell syntax by generated POSIX console launchers. This occurs because the interpreter path is not properly escaped in shell wrappers, enabling shell expansions like $(...) to execute commands when the launcher is run. The issue affects POSIX console scripts generated by the app-data seeder or pip when the interpreter path requires a shell wrapper. Windows executable launchers are not affected. The vulnerability was introduced in virtualenv 20.0.2 and fixed in versions 1.6.2 and 1.18.1_2.

A vulnerability in the builtin creator of virtualenv allows directory symlinks to be followed during environment creation, enabling writes outside the intended destination directory. An attacker who can prepare linked directories under the target path can cause files such as executables and activation scripts to be written to locations like ~/.local/bin. This can lead to code execution when the user runs commands from the affected PATH. The issue affects virtualenv versions prior to 1.6.2 and 1.18.1_2, with fixes available in those versions.

Red Hat has released a critical security update for OpenShift Developer Tools - Openshift Jenkins 4.18. The update addresses multiple security vulnerabilities identified by various CVEs, including CVE-2024-38827 and numerous others. Users of OpenShift Jenkins 4.18 are recommended to upgrade to the latest version to mitigate these security issues. No specific technical details or exploit information are provided in the advisory.

A vulnerability in Roundcube was fixed that addressed a bug where an alias login was not properly qualified by the IMAP host. This flaw could allow an attacker with low privileges to gain unauthorized access under certain conditions. The issue affects multiple specific versions of Roundcube. The CVSS score is 6.8, indicating a medium severity impact with high confidentiality and integrity impact but no availability impact.

A vulnerability in Roundcube involves the CSS proxy content processing lacking a size limit, potentially leading to denial of service conditions. The issue affects multiple specific versions of Roundcube. The CVSS score is 5.3, indicating a medium severity impact primarily affecting availability. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.

A Server-Side Request Forgery (SSRF) vulnerability in Roundcube allows bypass of the is_local_url() filter via NAT64 64:ff9b::/96 addresses. This vulnerability affects multiple specific versions of Roundcube and has a high severity rating with a CVSS score of 7.2. The flaw could allow an attacker to cause the server to make unauthorized requests, potentially leading to information disclosure or other impacts.

A vulnerability in Roundcube allows bypassing remote content blocking via SVG SMIL by attribute. This issue affects multiple specific versions of Roundcube and has a medium severity rating with a CVSS score of 5.3. The vulnerability does not require privileges or user interaction to exploit and impacts confidentiality without affecting integrity or availability.

HAProxy versions before 3.4.6 contain a vulnerability that allows a remote unauthenticated attacker to cause a denial of service. This vulnerability does not impact confidentiality or integrity but can disrupt availability by causing service outages.

HAProxy versions 3.2 before 3.4.6 contain a vulnerability that allows a remote unauthenticated attacker to cause a denial of service (DoS) condition. This flaw does not impact confidentiality or integrity but can disrupt availability by crashing or otherwise incapacitating the service.

A vulnerability in Roundcube allows bypassing remote content blocking via CSS escapes in FuncIRI attributes. This issue affects multiple specific versions of Roundcube and has a medium severity rating with a CVSS score of 5.3. The vulnerability does not require user interaction or privileges and impacts confidentiality by potentially allowing remote content to be loaded despite blocking mechanisms.

A high-severity vulnerability (CVE-2026-114727) in Roundcube involves unsafe handling of attachment content passed to ImageMagick during image resizing. This flaw could lead to high impact on confidentiality, integrity, and availability. Multiple specific versions of Roundcube are affected. The vulnerability has a CVSS score of 8.3, indicating a serious risk. No public exploits are known in the wild. The product is not a cloud service, and no explicit patch information is provided in the input.

A high-severity vulnerability (CVE-2026-114724) in Roundcube affects multiple specific versions. The flaw involves an object injection primitive in the rcube_session::unserialize() function via session keys prefixed with an exclamation mark (!). This vulnerability can lead to complete compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 score of 7.4, indicating high impact. No public exploits or known exploitation in the wild have been reported. The affected versions are explicitly listed, and the product is not a cloud service.

A vulnerability in ImageMagick allows resource limits to be bypassed via the GD fallback mechanism during thumbnail generation. This flaw affects specific Ubuntu package versions of ImageMagick 6.7.7.10. The issue has a low severity with a CVSS score of 3.7, indicating limited impact primarily on availability. No known exploits are reported in the wild.

A mail header injection vulnerability exists in Roundcube when forwarding a message as an attachment, specifically via the subject field. This flaw allows an attacker to inject malicious content into mail headers. The vulnerability has a medium severity rating with a CVSS score of 4.0. Multiple specific versions of Roundcube are affected. No public exploits or known active exploitation have been reported. The vulnerability has been publicly disclosed as of October 23, 2026.