Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

pip can extract console_scripts and gui_scripts outside installation directory

Tar: tar: hidden file injection via crafted archives

Libxslt: use-after-free with key data stored cross-rvt

Potential SQL injection via QuerySet.order_by and FilteredRelation

Potential SQL injection in column aliases via control characters

Potential SQL injection via raster lookups on PostGIS

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Gnutls: vulnerability in gnutls sct extension parsing

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape

Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function