HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

Containers/image: digest type does not guarantee valid type

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run…

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

GOSTCTR implementation unable to process more than 255 blocks correctly

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification

LDAP Injection Vulnerability in LDAPStoreHelper.java

Golang-fips: golang fips zeroed buffer