26 Oct 2026

4 new, 1 updated.

New that day

Rocq Prover26 Oct 2026 Rocq: soundness bug public PoCmedium severity
Do now Take Rocq proof checking offline or restrict who can submit proof files until the vendor's advisory names a fix, since no fix exists yet. Advisory
Re-scored 26 Oct ~~critical~~ → medium KEV – Record ✓ Vendor ✓
Rocq Prover26 Oct 2026 Rocq: soundness bug public PoCmedium severity
Do now Take Rocq proof checking offline or restrict who can submit proof files until the vendor's advisory names a fix, since no fix exists yet. Advisory
Re-scored 26 Oct ~~critical~~ → medium KEV – Record ✓ Vendor ✓
Lean 426 Oct 2026 Leanprover lean4: vulnerability (public PoC) public PoCmedium severity
Fixed in 4.32.2 Advisory
Re-plated 26 Oct ~~On hold (status unknown)~~ → Half-poured (some lines fixed) KEV – Record ✓ Vendor ✓
NGINX Plus26 Oct 2026 Memory corruption high severity
Fixed in NGINX Plus R37, NGINX Open Source 1.31.0 +1
Re-plated 26 Oct ~~On hold (status unknown)~~ → Order up (fix available) KEV – Record ✓ Vendor ✓

Brotli22 Oct 2026 HTTP2Shell Not fixed everywherecritical severity
Fixed in Node.js 26.12.1, Node.js 24.22.1 +5 Advisorypip install --upgrade "Brotli>=1.2.1"pip install --upgrade "brotlicffi>=1.2.1.0"
Re-plated 26 Oct ~~Half-poured (some lines fixed)~~ → Order up (fix available) KEV – Record ✓ Vendor ✓