Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

pyOpenSSL DTLS cookie callback buffer overflow

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Next.js: Server-side request forgery in applications using WebSocket upgrades

Next.js: Middleware / Proxy bypass through dynamic route parameter injection

ws: Memory exhaustion DoS from tiny fragments and data chunks

image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

Svelte devalue: DoS via sparse array deserialization

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

ws: Uninitialized memory disclosure

Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Next.js: Denial of Service via connection exhaustion in applications using Cache Components

Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Next.js: Middleware / Proxy bypass in Pages Router applications using i18n

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

Prometheus Azure AD remote write OAuth client secret exposed via config API

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

pyasn1 has a DoS vulnerability in decoder

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Next.js: Denial of Service in the Image Optimization API

pip can extract console_scripts and gui_scripts outside installation directory

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh