Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Oct 15, 2026
- Critical9.0@fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the client's Connection header after the proxy has added its own headers vi…Apr 15, 2026
- Medium5.4IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.Apr 1, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Mar 26, 2026
- Medium6.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.Mar 25, 2026
- Medium5.4IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.Mar 10, 2026
- Medium5.4IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.Mar 10, 2026
- Critical9.3A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and execute an account takeover vi…Mar 5, 2026
- Medium5.3A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker…Feb 26, 2026
- Critical9.1A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with th…Feb 20, 2026
10 records · page 1 of 1
PreviousNext