Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

Gnutls: gnutls: authentication bypass via nul character in username

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

Gnutls: gnutls: denial of service via dtls zero-length fragment

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

Libxml: type confusion leads to denial of service (dos)