Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

fast-uri vulnerable to host confusion via failed IDN canonicalization

Docling: Unsafe Zip Extraction in EasyOCR Model Download

Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read

undici WebSocket client vulnerable to denial of service via fragment count bypass

ws: Memory exhaustion DoS from tiny fragments and data chunks

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Allocation of Resources Without Limits or Throttling in axios

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

ws: Uninitialized memory disclosure

protobufjs: Denial of service through unbounded protobuf recursion

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

Quadratic string concatentation in consumeComment in net/mail

Quadratic string concatenation in consumePhrase in net/mail

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

xmldom: XML node injection through unvalidated processing instruction serialization

xmldom: Denial of service via uncontrolled recursion in XML serialization

xmldom: XML node injection through unvalidated comment serialization

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

AIOHTTP Vulnerable to Deserialization of Untrusted Data

Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans