Vulnerabilities
Apache Tomcat HTTP/2 Async Flaw Mixes User Requests
A flaw in Apache Tomcat's HTTP/2 async processing can cause user request mix-ups. The advisory lists affected versions but does not mention a fix.
oss-security
Everything Vuln Post has reported about oss-security: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Go 1.27.3 and 1.26.10 Released for CA Certificate Removal
Google released minor point updates for Go 1.27 and 1.26 that include a security fix related to CA certificate removal.
Vulnerabilities
OpenStack Manila Fixes Cross-Project Share Metadata Flaw in CVE-2026-71195
OpenStack Manila versions before specific updates allow unauthorized changes to public share settings and export metadata across projects.
Vulnerabilities
Mozilla Issues Guidance Following eMudhra Intermediate Certificate Compromise
Mozilla published advice on Oct 20 regarding compromised eMudhra intermediate certificates, urging protection for Firefox users via security mailing lists.
Vulnerabilities
Apache Kylin Patch Fixes Resource Exhaustion in Computed Columns
A low-severity flaw in Apache Kylin allows project admins to exhaust resources via cache APIs. Version 5.0.5 resolves the issue for affected users.
Vulnerabilities
Apache Answer CVE-2026-68482: Low-Severity Authorization Flaw in Question Invite Lookup
Apache Answer versions through 2.0.2 lack visibility checks on invited users for non-public questions, allowing unauthorized data retrieval.