Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
User-controlled header names and values containing newlines can allow injecting HTTP headers.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-25 | 1 | Patch1 |
| 2026-02-28 | 1 | Patch1 |
| 2026-03-07 | 1 | Disclosure1 |
| 2026-03-19 | 1 | Patch1 |
🔍 Lambda Watchdog detected that CVE-2026-0865 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/444 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
AWS has removed CVE-2026-0865 from its latest Lambda base images, indicating the vulnerability has been patched with no evidence of current exploitation.
🚨 New MEDIUM CVE detected in AWS Lambda 🚨 CVE-2026-0865 impacts python in 7 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/444 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
Post summary
A new medium‑severity vulnerability (CVE‑2026‑0865) affecting Python in seven AWS Lambda base images has been reported, with issue details posted on GitHub and further information available on Lambdawatchdog.
Fedora 42 and 43 ship security updates for python3.9, fixing critical command injection flaws (CVE-2026-1299, CVE-2026-0865, CVE-2025-15366, CVE-2025-15367). Developers should update. #Linux https://threatcluster.io/cluster/fedora-python-39-command-injection-vulnerabilities-addressed-ae49cdaf
Post summary
Fedora 42 and 43 release security updates for Python 3.9 that address multiple critical command injection vulnerabilities; developers are urged to apply these patches.
SUSE releases security updates for Python 3.6 and 3.10 on SLES and openSUSE, patching HTTP header injection flaws CVE-2025-11468, CVE-2026-0672, CVE-2026-0865 and CVE-2025-15366. Users should update. https://threatcluster.io/cluster/multiple-cves-addressed-in-python-http-header-injection-vuln-4575b4d8
Post summary
SUSE has issued security updates for Python 3.6 and 3.10 on SLES and openSUSE, addressing multiple HTTP header injection CVEs; users are advised to apply the patches.