Chromium: CVE-2025-1919 Out of bounds read in Media

Chromium: CVE-2025-1918 Out of bounds read in PDFium

Chromium: CVE-2025-1917 Inappropriate Implementation in Browser UI

Chromium: CVE-2025-1916 Use after free in Profiles

Chromium: CVE-2025-1915 Improper Limitation of a Pathname to a Restricted Directory in DevTools

Chromium: CVE-2025-1914 Out of bounds read in V8

Stream HTTP wrapper truncates redirect location to 1024 bytes

Mishandling of comma during folding and unicode-encoding of email headers

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.

Out-of-bounds Write in radare2

Stream HTTP wrapper header check might omit basic auth header

pgsql extension does not check for errors during escaping

Streams HTTP wrapper does not fail for headers with invalid name and no colon

libarchive bsdunzip.c list null pointer dereference

libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c

IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date

Arbitrary Code Execution via Crafted Keras Config for Model Loading

lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium

arrayLimit bypass in bracket notation allows DoS via memory exhaustion