Skip to content
OpenAdvisories

Archive

6 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /6 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-71554 Public exploit

    h2: Duplicate Host header could facilitate request smuggling

    h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward every Host header to the consuming application. Where the consumer downgrades HTTP…

    python-hyper h2 open-webui airflow-3 Debian Ubuntu Wolfi PyPI
  • Medium 5.3
    CVE-2026-64640 Public exploit

    Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation

    Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to…

    Apache Software Foundation Apache Polaris apache-polaris PyPI