Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

Vim: Out-of-bounds Read with libsodium-encrypted Files

Vim: Out-of-bounds Read in Text Property Count

Nokogiri: Possible Use-After-Free in XInclude Processing

Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

Podman: Malformed Image can trick podman run into leaking host environment variables into the container

RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS

RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations

RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass

RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks

RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom

RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering