It was discovered that Twisted incorrectly handled response order when
processing multiple HTTP requests. A remote attacker could possibly use
this issue to delay and manipulate responses.
This issue only affected Ubuntu 24.04 LTS. (CVE-2024-41671)
It was discovered that Twisted did not properly sanitize certain input.
An attacker could use this vulnerability to possibly execute an HTML
injection leading to a cross-site scripting (XSS) attack.
(CVE-2024-41810)
More Stories
DSA-5883-1 mercurial – security update
A cross-site scripting vulnerability was discovered in hgweb, the integrated stand-alone web interface of the Mercurial version control system. https://security-tracker.debian.org/tracker/DSA-5883-1...
A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution
A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of this vulnerability could allow for arbitrary code execution...
chromium-134.0.6998.117-1.fc41
FEDORA-2025-1afc565e2b Packages in this update: chromium-134.0.6998.117-1.fc41 Update description: Update to 134.0.6998.117 * Critical CVE-2025-2476: Use after free in Lens Read...
chromium-134.0.6998.117-1.el10_1
FEDORA-EPEL-2025-ac7714f6e5 Packages in this update: chromium-134.0.6998.117-1.el10_1 Update description: Update to 134.0.6998.117 * Critical CVE-2025-2476: Use after free in Lens Read...
chromium-134.0.6998.117-1.fc40
FEDORA-2025-bee62eff98 Packages in this update: chromium-134.0.6998.117-1.fc40 Update description: Update to 134.0.6998.117 * Critical CVE-2025-2476: Use after free in Lens Read...
chromium-134.0.6998.117-1.fc42
FEDORA-2025-3ccee236a3 Packages in this update: chromium-134.0.6998.117-1.fc42 Update description: Update to 134.0.6998.117 * Critical CVE-2025-2476: Use after free in Lens Read...