https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T16:40:10.592911+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-ec45528 Withdrawn: CLEANSTART-2026-EC45528 — Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5 2026-10-19T16:40:10.595659+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5. See references for individual vulnerability details.

 https://db.gcve.eu/vuln/cve-2026-50009 CVE-2026-50009 — Netty QUIC stateless reset token material exposed through header-visible connection IDs 2026-10-19T16:40:10.595720+00:00

Affected: netty

Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token generators. The reset token for the server's current source connection ID can be derived from bytes that appear as the connection ID in QUIC headers after a source-CID rotation. An on-path attacker observing the headers can use the token to perform a Denial of Service by sending a spoofed Stateless Reset packet. Version 4.2.15.Final patches the issue.