Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Allocation of Resources Without Limits or Throttling in axios

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

ws: Uninitialized memory disclosure

protobufjs: Denial of service through unbounded protobuf recursion

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

Quadratic string concatentation in consumeComment in net/mail

Quadratic string concatenation in consumePhrase in net/mail

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

xmldom: XML node injection through unvalidated processing instruction serialization

xmldom: Denial of service via uncontrolled recursion in XML serialization

xmldom: XML node injection through unvalidated comment serialization

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

AIOHTTP Vulnerable to Deserialization of Untrusted Data

Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()