Vincent55 Yang

**Name of the Vulnerable Software and Affected Versions** cPanel (affected versions not specified) **Description** HTTP Smuggling in cPanel allows for the potential leak of credentials. HTTP Smuggling is a technique that interferes with the way a website processes sequences of HTTP requests, often by exploiting discrepancies in how a front-end proxy and a back-end server interpret the `Content-Length` or `Transfer-Encoding` headers. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** cPanel (affected versions not specified) **Description** Improper preservation of SQL mode when renaming databases allows the execution of SQL commands in root context. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apache Airflow (affected versions not specified) **Description** An example named 'example xcom' in the documentation implemented an unsafe pattern for reading values from XCom. This could allow a UI user with permissions to modify XComs to execute arbitrary code on the worker. XCom is a mechanism that allows tasks to exchange small amounts of data. **Recommendations** Users who implemented the pattern found in the 'example xcom' example should adjust their implementations to match the improved version provided in the Airflow 3.2.0 documentation.