Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL

MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

Possible arbitrary code execution during DNSSEC validation

Gnutls: gnutls: authentication bypass via nul character in username

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose

MariaDB: mysql_real_escape_string() incorrectly handled big5

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Gnutls: gnutls: denial of service via dtls zero-length fragment

Libxml: heap use after free (uaf) leads to denial of service (dos)

Libxml: type confusion leads to denial of service (dos)

Libssh: libssh: authentication bypass via missing gssapi principal check

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

Heap Use-After-Free in the PKCS7_verify() Function

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

PostgreSQL server undersizes allocations, via integer wraparound

redis-server RESTORE invalid memory access may allow remote code execution

redis-server use-after-free in unblock client flow may allow remote code execution

Apache HTTP Server: http2: double free and possible RCE on early reset

Composer has Command Injection via Malicious Perforce Reference

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Libxml2: double-free/uaf in libxml2 python bindings

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

Gnutls: vulnerability in gnutls othername san export

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

NGINX Open-Source ngx_http_v3_module vulnerability

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

NGINX ngx_http_rewrite_module vulnerability

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by…

NGINX ngx_http_rewrite_module vulnerability

redis-server Lua use-after-free may allow remote code execution

BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

Podman: podman kube play command may overwrite host files

MariaDB: wsrep SST unsafe parameter handling on the donor side

Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush

Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()

Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution