Threats tagged 'ghsa-9p8f-ppfj-8gc5'

CVE-2026-72587 is a medium severity cache poisoning vulnerability in CoreBunch's Instatic product versions prior to 0.0.15. It allows an unauthenticated remote attacker to manipulate the shared process-wide render cache by exploiting the u query parameter in a specific GET request endpoint. This vulnerability is related to inconsistent interpretation of HTTP requests, categorized under CWE-444 (HTTP Request/Response Smuggling). No official patch or remediation guidance has been provided yet.