Known Vulnerabilities for Http-client by Call-cc
Listed below are 2 of the newest known vulnerabilities associated with "Http-client" by "Call-cc".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-119559 json | OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to e... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119416 json | CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that al... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119415 json | CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME part hea... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119201 json | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-118777 json | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forg... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-118766 json | Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-118763 json | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.t... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-118657 json | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers from an... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-118264 json | Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a client Web... | Not Provided | 2026-10-28 | 2026-10-30 |
| CVE-2026-118262 json | Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy goroutines... | Not Provided | 2026-10-28 | 2026-10-28 |