undici's Agent component improperly handles TLS options by deep cloning constructor options via JSON serialization, which drops function-valued TLS callbacks such as checkServerIdentity. This results in a TLS certificate validation bypass where custom verification logic is ignored, potentially allowing acceptance of TLS peers that should be rejected. The vulnerability affects applications using Agent as the default dispatcher for request, fetch, and setGlobalDispatcher, as well as EnvHttpProxyAgent on certain routes. Fixed in undici versions 6.29.1, 7.30.1, and 8.12.2.
undici is vulnerable to a denial of service condition triggered by a TLS 1.2 server-initiated renegotiation presenting a different, valid but hostname-mismatched certificate. This causes an uncaught assertion error that crashes the Node.js client process, affecting both HTTP/1.1 and HTTP/2. Only TLS 1.2 is impacted, as TLS 1.3 does not support renegotiation. The issue is fixed in undici versions 6.29.1, 7.30.1, and 8.12.2. Mitigation includes upgrading to these versions or restricting connections to TLS 1.3 to prevent renegotiation.
undici's WebSocket client, including Node.js's bundled globalThis.WebSocket, is vulnerable to a denial of service condition caused by unbounded automatic PONG buffering. A malicious WebSocket server can send continuous PING frames causing the client to queue PONG responses without respecting backpressure, leading to memory exhaustion and process termination. This affects undici versions from 5.15.0 up to but not including 6.29.1, 7.0.0 up to 7.30.1, and 8.0.0 up to 8.12.2. Upgrading to versions 6.29.1, 7.30.1, or 8.12.2 mitigates the issue by properly handling backpressure.
A vulnerability in undici's decompress interceptor allows a denial of service via an unhandled exception. When the decompress interceptor forwards decompressed data to a downstream handler that throws an exception asynchronously (such as the dump interceptor with a maxSize limit), the exception is uncaught and terminates the Node.js process. This can be triggered by a malicious HTTP server sending a small compressed response that decompresses to a size exceeding the limit. The issue affects undici versions >=7.15.0 <7.30.1 and >=8.0.0 <8.12.2. Fixed in versions 7.30.1 and 8.12.2.
A vulnerability was identified in OpenSSL affecting Red Hat AI Base Images 3.0.7 (TPU). The flaw occurs when applications directly invoke low-level CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions with non-block-aligned lengths on hardware-accelerated builds, potentially exposing 1-15 trailing bytes of a message in cleartext. This exposure bypasses authentication tags, allowing undetected reading or tampering of these bytes. However, typical OpenSSL usage via higher-level EVP APIs, TLS protocols, and FIPS modules are not affected. Red Hat rates the impact as low for its products. No fix is currently available that meets Red Hat's criteria for deployment and stability.
CVE-2025-8869 is a critical security vulnerability affecting Red Hat AI Base Images 3.0.7 (CUDA), specifically components within Red Hat OpenShift AI and Red Hat AI Inference Server. The vulnerability involves arbitrary code execution via specially crafted ZIP archives during package resolution or installation using the uv tool. Exploitation requires user interaction to install a malicious package. There is currently no available fix or mitigation that meets Red Hat's criteria for ease of use, deployment, and stability.
A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system in the traceapplication.php file via the Search argument. This flaw allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. The vulnerability has a CVSS score of 7.3 (high severity). Public exploit code is available, but no official response or patch has been issued by the project.
A high-severity vulnerability (CVE-2026-116649) was identified in Tanium Enforce involving improper output sanitization. This flaw could allow an attacker to cause partial confidentiality, integrity, and availability impacts. The vulnerability has a CVSS score of 7.1, indicating significant risk. No affected versions or patch information are explicitly provided in the available data.
Tanium Comply contains an improper output sanitization vulnerability identified as CVE-2026-116647. This flaw can lead to partial compromise of confidentiality, integrity, and availability. The vulnerability has a high severity score of 7.1 but no known exploits in the wild have been reported. No specific affected versions or patch information are provided.
An insufficient logging vulnerability was identified and addressed in Tanium Server. This vulnerability relates to inadequate logging practices that could impact the integrity of logged information. The issue is assigned CVE-2026-108311 and has a low severity score of 2.7. No specific affected versions or patch details are provided in the available data.
A heap-based buffer overflow vulnerability was identified and addressed in Tanium's Index component. This vulnerability could allow an attacker with local privileges to execute arbitrary code or cause a denial of service. The flaw has been assigned CVE-2026-108307 and carries a high severity rating with a CVSS score of 7.8.
A local privilege escalation vulnerability was identified and addressed by Tanium in its End-User Notifications component. This vulnerability could allow a local attacker to gain elevated privileges on the affected system. The issue has a high severity rating with a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No specific affected versions or patch details are provided in the available data.
A local privilege escalation vulnerability was identified and addressed by Tanium in its End-User Notifications component. This vulnerability allows an attacker with local access to escalate privileges, potentially leading to full system compromise. The vulnerability is rated high severity with a CVSS score of 7.8. No specific affected versions or patch details are provided in the available data.
A local privilege escalation vulnerability was identified and addressed by Tanium in its End-User Notifications component. This vulnerability allows a local attacker with limited privileges to escalate their privileges, potentially leading to full system compromise. The vulnerability is rated high severity with a CVSS score of 7.8. No specific affected versions or patch details are provided in the available data.
A SQL injection vulnerability exists in the admin/customer_search.php file of the oretnom23 php-travel-agency-system. The flaw allows remote attackers to manipulate the customer_name, voucher_no, or emp_name parameters to execute unauthorized SQL commands. The vulnerability has a high severity score of 7.3 and has been publicly disclosed. No patch or vendor response is currently available.
A high-severity vulnerability exists in oretnom23 php-travel-agency-system in the admin/employee_insert.php file. It allows remote attackers to perform unrestricted file uploads by manipulating the employee photo argument. The vulnerability has a CVSS score of 7.3 and an exploit has been publicly disclosed. The project has been informed but has not yet responded or issued a fix.
EPICS Base versions 7.0.10 and earlier contain a vulnerability due to insufficient validation of element or length values in network messages. This flaw can cause the application to read beyond the bounds of an allocated buffer, potentially leading to denial of service and exposure of adjacent memory contents.
EPICS Base versions 7.0.10 and earlier contain a vulnerability due to insufficient validation of element or length values in network messages. This flaw can cause the application to read beyond allocated buffer boundaries, potentially leading to denial of service and exposure of adjacent memory contents.
EPICS Base versions 7.0.10 and earlier contain an integer overflow vulnerability in network request processing. This flaw can lead to incorrect memory allocation sizes, potentially causing memory corruption, denial of service, or remote code execution if exploited.