CVE-2026-33816 in github.com/jackc/pgx

CVE-2026-33815 in github.com/jackc/pgx

gRPC-Go has an authorization bypass via missing leading slash in :path

Apache Thrift: Swift Range crash in skip()

Apache Thrift: Go TFramedTransport uint32 overflow

Tempo query limit results in unbounded memory allocation

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Go JOSE affect by a panic in JWE decryption

Denial of service in github.com/jackc/pgproto3/v2

Denial of service in github.com/buger/jsonparser

goxmldsig has validateSignature Loop Variable Capture Signature Bypass

Incorrect parsing of IPv6 host literals in net/url

Incorrect enforcement of email constraints in crypto/x509

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Thrift: Swift Compact Protocol integer overflow

Apache Thrift: C++ JSON OOB read

Apache Thrift: c_glib dispatch stack overflow