Known Vulnerabilities for HTTP Headers by Zinoui
Listed below are 10 of the newest known vulnerabilities associated with "HTTP Headers" by "Zinoui".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58399 json | @acastellon/auth is an authentication control system for microservices. Versions prior to 2.3.0 appear to allow an unauthenti... | Not Provided | 2026-07-01 | 2026-07-02 |
| CVE-2026-58055 json | nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and bod... | Not Provided | 2026-06-28 | 2026-06-29 |
| CVE-2026-56425 json | The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization f... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-55994 json | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vul... | Not Provided | 2026-07-06 | 2026-07-06 |
| CVE-2026-55993 json | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vul... | Not Provided | 2026-07-06 | 2026-07-06 |
| CVE-2026-54673 json | electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler (HttpExecutor.prep... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-54665 json | Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alte... | Not Provided | 2026-06-22 | 2026-06-22 |
| CVE-2026-54399 json | Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earl... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-54388 json | Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with d... | Not Provided | 2026-06-17 | 2026-06-18 |
| CVE-2026-54387 json | Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunk... | Not Provided | 2026-06-17 | 2026-06-18 |