Containers/image: digest type does not guarantee valid type

jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

Netty's wrapping plain trust manager silently disables hostname verification

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Micrometer HTTP server instrumentations DoS vulnerability

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads