TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Invalid Memory Access in Sentencepiece,

Arbitrary Code Execution in feast-dev/feast

Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication

Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

React Router has XSS Vulnerability

Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default

NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read

undici WebSocket client vulnerable to denial of service via fragment count bypass

ws: Memory exhaustion DoS from tiny fragments and data chunks

Netty's wrapping plain trust manager silently disables hostname verification

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

ws: Uninitialized memory disclosure

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

Quadratic string concatentation in consumeComment in net/mail

Quadratic string concatenation in consumePhrase in net/mail

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

fast-uri vulnerable to path traversal via percent-encoded dot segments

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Pillow is vulnerable to a FITS GZIP decompression bomb

GOSTCTR implementation unable to process more than 255 blocks correctly

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Go JOSE affect by a panic in JWE decryption

ONNX: Path Traversal via Symlink

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

path-to-regexp vulnerable to Denial of Service via sequential optional groups

NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

Black: Arbitrary file writes from unsanitized user input in cache file name

ReDoS in multipart 1.3.0 - `parse_options_header()`

Argo Workflows has unauthorized access to Argo Workflows Template

Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

Apache ZooKeeper: Sensitive information disclosure in client configuration handling

Incorrect enforcement of email constraints in crypto/x509

SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)

xgrammar: Multi-layer nesting causes DoS

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown…