CVE Vulnerabilities - 14 April 2026

A Novu webhook can be tricked into calling unvalidated URLs, allowing potential attacks. This is a security risk because an attacker could use this to access internal systems or data. To protect again...

When debug logging is enabled in production, Oxia logs authentication tokens in plain text, allowing an attacker to steal them and impersonate users. Affected versions of Oxia using OIDC authenticatio...

Oxia exposes authentication tokens in debug logs if debug logging is enabled in production. This allows an attacker with access to logs to steal and reuse user credentials. To fix, ensure debug loggin...

The goshs software allows attackers to redirect users and inject unauthorized headers without proper validation or authentication. This could lead to sensitive information disclosure or phishing attac...

A weakness in tar-rs, a tool used to extract archives, can be exploited by an attacker to change permissions on system directories. If a user or system extracts a specially crafted archive, it could a...

A flaw in the Apache HTTP Server can cause the server to crash or become unresponsive, potentially leading to a denial of service. This affects Apache HTTP Server installations, which could impact web...

Apache Struts 2, a widely used Java framework, contains a critical flaw that allows attackers to execute arbitrary code on a server. This can happen when a specially crafted request is sent to the ser...

Rust's tar archive unpacking functionality has a vulnerability that allows an attacker to modify directory permissions, potentially leading to privilege escalation. This could happen if a user or syst...

This update fixes multiple security issues in the X Window Server that could allow an attacker to execute arbitrary code or crash the system. Affected users should update their X Window Server to the ...

A security update for the X Window Server fixes several issues that could allow an attacker to crash the server or execute malicious code. This affects systems that use the X Window Server, which is c...

This update addresses four security risks in the X server that could allow an attacker to access or disrupt your system. If left unpatched, these issues could potentially allow an attacker to read or ...