https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T18:21:47.126378+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-94083 CVE-2026-94083 2026-09-28T18:21:47.136755+00:00

Affected: OISF Suricata

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when there is a DoH2 request with an HTTP1 to HTTP2 upgrade). This requires app-layer.protocols.doh2 to be enabled, which is the default in 8.x versions.