Other big exploits/vulnerabilities 10-21-26

[bigredfish]

Instead of creating a thread for each one, as they appear to be coming fast and furious with the help of AI, I figured I'd start this thread so that the folks way smarter than me can browse/add to it and decide which ones are of importance to them

Posting each vulnerability/exploit on their own post in this thread


Primer




Good Question

 

[bigredfish]

JAVA

 

[bigredfish]

The AI gateway library LiteLLM was hijacked again in a supply chain attack.

CONTAINED

 

[bigredfish]

Header Accordions: QPACK amplification attacks against HTTP/3 servers​

Header Accordions: QPACK amplification attacks against HTTP/3 servers - FoxIO | Cyber Innovation

We solve the world’s toughest cyber challenges—creating breakthrough technology and embedding it into the systems that run everything.

foxio.io

 

[prsmith777]

Here's another from today:

GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 | GitLab Docs

CVSS 10.0. WTF is going on???