// security

$ tail -f ./security

Headlines from early disclosure channels, research labs and curated news, each with a short summary.

live updated 23 Oct, 23:14
last 24 h 74 headlines
sources 37

# Today

  1. oss-security early signals infra

    Ruby Regexp compilation fixes related to GitLab's CVE's

    Ruby released Regexp compilation fixes related to GitLab CVEs.

    seclists.org
  2. oss-security early signals infra

    PHP Informational advisory: Session upload progress (CVE-2026-115560)

    PHP published an informational security advisory for CVE-2026-115560, which affects session upload progress functionality.

    seclists.org
  3. oss-security early signals infra

    CVE-2026-95664: Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions

    CVE-2026-95664 affects Apache Camel’s AWS2-S3 producer, which evaluates untrusted S3 object keys from the CamelAwsS3Key header as simple expressions.

    seclists.org