Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling