Gnutls: gnutls: authentication bypass via nul character in username

vLLM leaks a heap address when PIL throws an error

vLLM affected by RCE via auto_map dynamic module loading during model initialization

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

vLLM: OpenAI auth bypass

Gnutls: gnutls: denial of service via dtls zero-length fragment

vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Vim modeline bypass via various options affects Vim < 9.2.0276

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension…

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O…

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

Pillow is vulnerable to a FITS GZIP decompression bomb

jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

ReDoS in multipart 1.3.0 - `parse_options_header()`

xgrammar: Multi-layer nesting causes DoS

Pillow has an out-of-bounds write when loading PSD images

Python-Multipart has Arbitrary File Write via Non-Default Configuration

Denial of Service in Python Protobuf

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

Vim affected by Command injection via newline in glob()

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

vLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server