Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

gRPC-Go has an authorization bypass via missing leading slash in :path

Apache Thrift: Swift Range crash in skip()

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Moby: Off-by-one error in plugin privilege validation

iskorotkov/avro: CPU Exhaustion in Avro Decoder

iskorotkov/avro: Integer Overflow in Avro Decoder

Crash when handling long CNAME response in net

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Apache Thrift: Go TFramedTransport uint32 overflow

Tempo query limit results in unbounded memory allocation

Unexpected work during chain building in crypto/x509

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Go JOSE affect by a panic in JWE decryption

Denial of service in github.com/jackc/pgproto3/v2

Denial of service in github.com/buger/jsonparser

goxmldsig has validateSignature Loop Variable Capture Signature Bypass

NATS has pre-auth server panic via leafnode handling

NATS has MQTT plaintext password disclosure

NATS Server panic via malicious compression on leafnode port

NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead

Incorrect parsing of IPv6 host literals in net/url

Incorrect enforcement of email constraints in crypto/x509

Memory exhaustion in query parameter parsing in net/url

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Thrift: Swift Compact Protocol integer overflow

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Inefficient candidate hostname parsing in crypto/x509

Apache Thrift: C++ JSON OOB read

NATS allows MQTT clients to bypass ACL checks

Apache Thrift: c_glib dispatch stack overflow

NATS credentials are exposed in monitoring port via command-line argv

NATS is vulnerable to pre-auth DoS through WebSockets client service