Null byte termination in hostnames

libxml streams use wrong content-type header when requesting a redirected resource

Header parser of http stream wrapper does not handle folded headers

vim main.c memory corruption

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery (SSRF) due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://127.0.0.1?@127.2.2.2/, the URI function will parse and see the host as 127.0.0.1 (which is correct), and hackney will refer the host as 127.2.2.2/. This vulnerability can be exploited when users rely on the URL function for host checking.

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

Quadratic complexity in node ID cache clearing

Keras keras.utils.get_file Utility Path Traversal Vulnerability

Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF

Chromium: CVE-2025-12036 Inappropriate implementation in V8

OOBW in utf_16le_to_utf_8_truncated() in libpcap

OOBR and OOBW in pcap_ether_aton() in libpcap

Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello

Forward Secrecy Violation in WolfSSL TLS 1.3

Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify

DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension

Timing Side-Channel in PSK Binder Verification

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt

GNU Binutils ldmisc.c vfinfo out-of-bounds

GNU Binutils prdbg.c tg_tag_type return value