RHSA-2026:10175

Handlebars provides the power necessary to let users build semantic templates.

Rollup is a module bundler for JavaScript.

@fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the client's Connection header after the proxy has added its own headers via rewriteRequestHeaders.

In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://…

Handlebars provides the power necessary to let users build semantic templates.

Netty is an asynchronous, event-driven network application framework.

Handlebars provides the power necessary to let users build semantic templates.

Handlebars provides the power necessary to let users build semantic templates.

Handlebars provides the power necessary to let users build semantic templates.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

gRPC-Go is the Go language implementation of gRPC.

The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink.

Netty is an asynchronous, event-driven network application framework.

Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under a specific path, already configured for a H…

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.

Traefik is an HTTP reverse proxy and load balancer.

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…

Traefik is an HTTP reverse proxy and load balancer.

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`.

Traefik is an HTTP reverse proxy and load balancer.

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened.

Traefik is an HTTP reverse proxy and load balancer.

Traefik is an HTTP reverse proxy and load balancer.