Apache Thrift: Swift Range crash in skip()

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Moby: Off-by-one error in plugin privilege validation

iskorotkov/avro: CPU Exhaustion in Avro Decoder

iskorotkov/avro: Integer Overflow in Avro Decoder

Crash when handling long CNAME response in net

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Apache Thrift: Go TFramedTransport uint32 overflow

Tempo query limit results in unbounded memory allocation

Unexpected work during chain building in crypto/x509

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Go JOSE affect by a panic in JWE decryption

Denial of service in github.com/jackc/pgproto3/v2

Denial of service in github.com/buger/jsonparser

goxmldsig has validateSignature Loop Variable Capture Signature Bypass

NATS has pre-auth server panic via leafnode handling

NATS has MQTT plaintext password disclosure

NATS Server panic via malicious compression on leafnode port

NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

Incorrect parsing of IPv6 host literals in net/url

Incorrect enforcement of email constraints in crypto/x509

Memory exhaustion in query parameter parsing in net/url

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Thrift: Swift Compact Protocol integer overflow

Docker: `PUT /containers/{id}/archive` executes container binary on the host