Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 09:45:45 +0000 CVE-2026-105570 — Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host https://vulnerability.circl.lu/vuln/cve-2026-105570 <p><strong>Affected:</strong> Docker Sandboxes</p> <p>Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider endpoint while bypassing response masking. If a user completed the OAuth flow, the provider&#39;s access and refresh tokens could be returned unmasked to the sandbox, exposing host-managed credentials.</p> <p><strong>Affected:</strong> Docker Sandboxes</p> <p>Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider endpoint while bypassing response masking. If a user completed the OAuth flow, the provider&#39;s access and refresh tokens could be returned unmasked to the sandbox, exposing host-managed credentials.</p> https://vulnerability.circl.lu/vuln/cve-2026-105570