https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T15:36:31.753288+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2026-11885 bdu:2026-11885 2026-11-15T15:36:31.755083+00:00 bdu:2026-11885 https://db.gcve.eu/vuln/cleanstart-2026-cc86390 CLEANSTART-2026-CC86390 — Security fix for GHSA-q83h-524g-xf6h applied in: ztunnel-fips 1.29.8-r0, ztunnel-fips 1.30.5-r0 2026-11-15T15:36:31.755127+00:00

Affected: CleanStart: ztunnel-fips

GHSA-q83h-524g-xf6h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://db.gcve.eu/vuln/rustsec-2026-0258 RUSTSEC-2026-0258 — h2 unbounded empty DATA frames 2026-11-15T15:36:31.755176+00:00

Affected: crates.io: h2

The h2 crate, used internally by hyper, had a flaw that would accept and queue empty DATA frames without limit. If streams were not actively drained, this could lead to unbounded memory usage, or a panic if the length overflows.

Low severity.

Patched in v0.4.16.