Posted by Qingran Zhao on Nov 03 Severity: low Affected versions: - Apache HertzBeat 1.7.1 - Apache HertzBeat 1.7.2 - Apache HertzBeat 1.7.3 - Apache HertzBeat 1.8.0 - Apache HertzBeat 1.9.0 - Apache HertzBeat 1.9.1 unaffected Description: Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP collector XML parsing path. An authenticated user with permission to create monitor templates can supply XPath...
CVE-2026-114442: Apache HertzBeat: incomplete XPath expression validation in aliasFields
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/479
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw
The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that leads nowhere. The new version…
Ghostunnel: Open-source TLS proxy with mutual authentication
Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a…
Rails security releases: 8.0.5.2 and 8.1.4.1
Posted by Mike Dalessio on Nov 03 Rails Versions 8.0.5.2 and 8.1.4.1 have been released. These are **security updates** addressing 21 security issues. We strongly…
Fixed Detectors, Moving Code: How Well Do Static Security Analyzers Hold Up over a Decade of C/C++ Evolution?
arXiv:2611.03742v1 Announce Type: new Abstract: Static application security testing (SAST) tools are often deployed on the assumption that detectors configured today…
When Debate Amplifies Risk: Social-Bias Vulnerabilities in Multi-Agent Safety Deliberation
arXiv:2611.04289v1 Announce Type: new Abstract: Retrieval-augmented Web applications increasingly employ multi-agent debate (MAD) to aggregate conflicting, noisy, and…
CGI versions before 5.00 for Perl (20 CVEs)
Posted by Stig Palmquist on Nov 03 CVE-2026-120631 CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used…