Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-25 | 1 | Patch1 |
| 2026-03-07 | 1 | General1 |
| 2026-03-19 | 1 | Patch1 |
🔍 Lambda Watchdog detected that CVE-2025-11468 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/441 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
AWS Lambda has updated its base images, removing CVE‑2025‑11468, indicating the vulnerability has been patched.
🚨 New MEDIUM CVE detected in AWS Lambda 🚨 CVE-2025-11468 impacts python in 7 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/441 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
Post summary
A medium‑severity CVE (CVE-2025-11468) has been detected in AWS Lambda Python base images; references to issue discussions and a website are provided, but no technical, exploit, or patch details are offered.
SUSE releases security updates for Python 3.6 and 3.10 on SLES and openSUSE, patching HTTP header injection flaws CVE-2025-11468, CVE-2026-0672, CVE-2026-0865 and CVE-2025-15366. Users should update. https://threatcluster.io/cluster/multiple-cves-addressed-in-python-http-header-injection-vuln-4575b4d8
Post summary
SUSE has released security updates for Python 3.6 and 3.10 on SLES and openSUSE, addressing multiple HTTP header injection CVEs; users are advised to apply the patches.