Public dashboards discloses all direct mode datasources

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory

Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage

ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response

Squid vulnerable to Denial of Service in ICP Request handling

Squid has Denial of Service in ICP Response handling

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

NGINX ngx_mail_auth_http_module vulnerability

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions, integer overflow in the Graphics component

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component

Race condition, use-after-free in the Graphics: WebRender component

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

ASP.NET Core Denial of Service Vulnerability

Incorrect parsing of IPv6 host literals in net/url

Incorrect enforcement of email constraints in crypto/x509

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown…

The issue was addressed with improved memory handling

Memory exhaustion in query parameter parsing in net/url

Denial of Service in Python Protobuf

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`

pyasn1 has a DoS vulnerability in decoder

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

net-imap vulnerable to STARTTLS stripping via invalid response timing

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Out of bounds read in IMAP parsing

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules

Gimp: gimp: heap buffer overflow in read_channel_data()

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image