https://blog.securelayer7.net/owasp-top-10-proactive-controls/ SecureLayer7 en 2026-08-06T11:09:24.000Z A Guide to OWASP Top 10 Proactive Controls Security News https://securelayer7.net/lab/craftcms-arbitrary-password-reset-elements-save-authorization-bypass SecureLayer7 en 2026-08-06T21:08:51.438Z Craft CMS Improper Authorization: Arbitrary Password Reset via Element Save Security Research https://securelayer7.net/lab/cve-2026-15895-jsii-diff-command-injection-npm-argument SecureLayer7 en 2026-08-07T18:36:04.885Z CVE-2026-15895: jsii-diff OS Command Injection via npm: Package Argument CVE Advisory https://securelayer7.net/lab/cve-2026-54763-traefik-underscore-header-identity-spoofing SecureLayer7 en 2026-08-06T17:09:04.206Z CVE-2026-54763: Traefik BasicAuth/DigestAuth/ForwardAuth Underscore Header Identity Spoofing CVE Advisory https://securelayer7.net/lab/cve-2026-59870-js-yaml-omap-quadratic-dos SecureLayer7 en 2026-08-06T21:05:01.900Z CVE-2026-59870: js-yaml Quadratic CPU Denial of Service via !!omap Security Research https://securelayer7.net/lab/cve-2026-63221-codeigniter4-deletebatch-where-sql-injection SecureLayer7 en 2026-08-07T18:34:56.311Z CVE-2026-63221: CodeIgniter4 Query Builder SQL Injection via deleteBatch() and where() CVE Advisory https://securelayer7.net/lab/cve-2026-63222-codeigniter4-uploadedfile-move-path-traversal SecureLayer7 en 2026-08-07T18:31:16.170Z CVE-2026-63222: CodeIgniter4 Path Traversal in UploadedFile::move() CVE Advisory https://securelayer7.net/lab/cve-2026-63223-codeigniter4-is-image-mime-in-upload-bypass-rce SecureLayer7 en 2026-08-07T18:30:06.398Z CVE-2026-63223: CodeIgniter4 Uploaded File Extension Validation Bypass in is_image and mime_in Rules CVE Advisory https://securelayer7.net/lab/cve-2026-64665-statamic-oauth-account-takeover-unverified-email SecureLayer7 en 2026-08-06T19:28:54.862Z CVE-2026-64665: Statamic CMS OAuth Account Takeover via Unverified Email Matching CVE Advisory https://securelayer7.net/lab/cve-2026-65600-traefik-replacepathregex-auth-bypass-path-traversal SecureLayer7 en 2026-08-06T17:10:21.964Z CVE-2026-65600: Traefik ReplacePathRegex Authentication Bypass via Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-67309-traefik-ingressnginx-rewritetarget-path-traversal-auth-bypass SecureLayer7 en 2026-08-06T16:49:01.930Z CVE-2026-67309: Traefik Kubernetes Ingress NGINX RewriteTarget Path Traversal Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-67422-pymdown-extensions-redos-inline-processors SecureLayer7 en 2026-08-07T18:28:53.655Z CVE-2026-67422: pymdown-extensions ReDoS in caret, tilde, betterem, and magiclink CVE Advisory https://securelayer7.net/lab/cve-2026-67434-php-codesniffer-gitblame-command-injection SecureLayer7 en 2026-08-06T21:49:00.642Z CVE-2026-67434: PHP_CodeSniffer OS Command Injection via Crafted Filename in Blame Reports CVE Advisory https://securelayer7.net/lab/cve-2026-71324-traefik-h2-connect-pool-poisoning-response-smuggling SecureLayer7 en 2026-08-06T16:09:05.929Z CVE-2026-71324: Traefik HTTP/2 CONNECT Pool Poisoning Cross-User Response Smuggling CVE Advisory https://securelayer7.net/lab/cve-2026-71327-traefik-gateway-api-route-identity-collision SecureLayer7 en 2026-08-06T16:50:29.405Z CVE-2026-71327: Traefik Gateway API Route Identity Collision Allows Cross-Namespace Backend Hijacking CVE Advisory https://securelayer7.net/lab/gitpython-config-option-name-injection-sshcommand-rce SecureLayer7 en 2026-08-07T15:48:55.947Z GitPython: git-config Option-Name Injection via = and # Characters Enables RCE Security Research https://securelayer7.net/lab/gitpython-submodule-name-path-traversal-arbitrary-repo-creation SecureLayer7 en 2026-08-07T15:50:19.375Z GitPython Submodule Name Path Traversal to Arbitrary Git Repository Creation Security Research https://securelayer7.net/lab/gitpython-unsafe-option-guard-bypass-split-single-char-options-argument-injectio SecureLayer7 en 2026-08-07T16:08:59.610Z GitPython unsafe-option guard bypass via split_single_char_options=False short-option smuggling Security Research https://securelayer7.net/lab/league-commonmark-footnote-duplicate-definition-dos SecureLayer7 en 2026-08-06T20:57:22.152Z league/commonmark Footnote Extension Quadratic Complexity DoS Security Research https://securelayer7.net/lab/league-commonmark-heading-slug-dos-quadratic-complexity SecureLayer7 en 2026-08-06T20:56:06.741Z league/commonmark Denial of Service via Colliding Heading Slugs Security Research