Month: April 2026

Information published. Continue reading CVE-2026-29181 OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)→

Information published. Continue reading CVE-2026-39882 OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies→

Information published. Continue reading CVE-2026-28390 Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo→

Information published. Continue reading CVE-2026-28389 Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo→

Information published. Continue reading CVE-2026-35611 Addressable has a Regular Expression Denial of Service in Addressable templates→

Information published. Continue reading CVE-2026-28810 Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver→

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Continue reading Chromium: CVE-2026-5919 Insufficient validation of untrusted input in WebSockets→

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Continue reading Chromium: CVE-2026-5918 Inappropriate implementation in Navigation→