Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

fast-uri vulnerable to path traversal via percent-encoded dot segments

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Pillow is vulnerable to a FITS GZIP decompression bomb

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

GOSTCTR implementation unable to process more than 255 blocks correctly

ONNX: Path Traversal via Symlink

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Denial of service in github.com/jackc/pgproto3/v2

NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

Feast: unauthenticated arbitrary file read

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

Black: Arbitrary file writes from unsanitized user input in cache file name

Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

Apache ZooKeeper: Sensitive information disclosure in client configuration handling

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown…

Path Traversal in nltk/nltk

Koa has Host Header Injection via `ctx.hostname`

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

Arbitrary File Read in Keras via HDF5 External Datasets

Pillow has an out-of-bounds write when loading PSD images

Fastify's Content-Type header tab character allows body validation bypass

Python-Multipart has Arbitrary File Write via Non-Default Configuration

pyasn1 has a DoS vulnerability in decoder

Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

Ollama Multi-Modal Model Image Processing NULL Pointer Dereference

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

AIOHTTP Vulnerable to Deserialization of Untrusted Data

jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack