Urgent.News

What's breaking now, across thousands of outlets.

Tech

CVE-2026-126347: CVE-2026-126347: Open Redirect via Triple-Slash Redirect Paths in Tornado RedirectHandler

CVE-2026-126347: Open Redirect via Triple-Slash Redirect Paths in Tornado RedirectHandler Vulnerability ID: CVE-2026-126347 CVSS Score: 3.1 Published: 2026-11-13 CVE-2026-126347 (GHSA-5cjw-f85j-cv6r) is an open redirect vulnerability (CWE-601) in Tornado, an asynchronous Python networking library and web framework. The flaw resides in tornado.web.RedirectHandler when dynamic URL redirection…

We haven't written up this one. Dev.to has the full story — the link below goes straight to it.

Read the original at dev.to →

More in Tech

Kubernetes NetworkPolicy: isolate and test traffic

Picture a Friday evening: a container in your staging namespace starts querying the prod database, for the plain reason that nothing stops it. In Kubernetes that is the default behaviour.

  • Default Kubernetes behavior allows pods without NetworkPolicy to communicate in/out of cluster.
  • NetworkPolicy restricts traffic flow by defining podSelector, policyTypes, and rules.
  • Best practices include granting only necessary permissions, thorough testing, and rollout order.

More from Saturday 14 November →