fast-uri vulnerable to path traversal via percent-encoded dot segments

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Pillow is vulnerable to a FITS GZIP decompression bomb

GOSTCTR implementation unable to process more than 255 blocks correctly

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Go JOSE affect by a panic in JWE decryption

ONNX: Path Traversal via Symlink

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

path-to-regexp vulnerable to Denial of Service via sequential optional groups

NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

Black: Arbitrary file writes from unsanitized user input in cache file name

ReDoS in multipart 1.3.0 - `parse_options_header()`

Argo Workflows has unauthorized access to Argo Workflows Template

Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

Apache ZooKeeper: Sensitive information disclosure in client configuration handling

Incorrect enforcement of email constraints in crypto/x509

SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)

xgrammar: Multi-layer nesting causes DoS

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown…

Path Traversal in nltk/nltk

Koa has Host Header Injection via `ctx.hostname`

Pillow has an out-of-bounds write when loading PSD images

Axios affected by Denial of Service via __proto__ Key in mergeConfig

Fastify's Content-Type header tab character allows body validation bypass

Python-Multipart has Arbitrary File Write via Non-Default Configuration

pyasn1 has a DoS vulnerability in decoder

Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

AIOHTTP Vulnerable to Deserialization of Untrusted Data

Apache Thrift: TSSLTransportFactory.java hostname verification

Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy

vLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`