pyOpenSSL DTLS cookie callback buffer overflow

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function

LIBPNG has a heap buffer overflow in png_set_quantize

Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation

Glib: integer overflow in in g_escape_uri_string()

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

pyasn1 has a DoS vulnerability in decoder

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Nodemailer: nodemailer: denial of service via crafted email address header

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results