PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

Black: Arbitrary file writes from unsanitized user input in cache file name

Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

Apache ZooKeeper: Sensitive information disclosure in client configuration handling

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown…

Path Traversal in nltk/nltk

Koa has Host Header Injection via `ctx.hostname`

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

Arbitrary File Read in Keras via HDF5 External Datasets

Pillow has an out-of-bounds write when loading PSD images

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

AIOHTTP Vulnerable to Deserialization of Untrusted Data

jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding

Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user

Ffmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()

LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy

Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser

vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server

vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabled

Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apis

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials

Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array

Jwcrypto: jwcrypto: denial of service via malformed jwe tokens

Trustyai-explainability: command injection via lmevaljob cr

pip can extract console_scripts and gui_scripts outside installation directory

Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

net-imap: Command Injection via unvalidated Symbol inputs

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace