Crash during DNSSEC validation of malicious content

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

Long list of incoming EDNS options degrades performance

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

ws: Uninitialized memory disclosure

Wasmtime: Panic when allocating a table exceeding the size of the host's address space

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

ASP.NET Core Denial of Service Vulnerability

Quadratic string concatentation in consumeComment in net/mail

Crash when handling long CNAME response in net

Quadratic string concatenation in consumePhrase in net/mail

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

Libxml2: libxml2: denial of service via crafted xsd-validated document

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

ngtcp2 has a qlog transport parameter serialization stack buffer overflow

.NET and Visual Studio Denial of Service Vulnerability

.NET Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET Spoofing Vulnerability

jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

P11-kit: null dereference via c_derivekey with specific null parameters

Denial of service in github.com/buger/jsonparser

Memory leak in code preparing DNSSEC proofs of non-existence

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

NGINX ngx_mail_auth_http_module vulnerability

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Incorrect enforcement of email constraints in crypto/x509

Malformed Valkey Cluster bus message can lead to Remote DoS

Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass

Malformed BRID/HHIT records can cause named to terminate unexpectedly

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Libxml: null pointer dereference leads to denial of service (dos)

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

net-imap vulnerable to STARTTLS stripping via invalid response timing

Gnutls: gnutls: security bypass due to incorrect name constraint handling