In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

ssl fails to validate incorrect extened key usage

riscv: Fix IPIs usage in kfence_protect_page()

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files.

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).

A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function.

Git LFS permits exfiltration of credentials via crafted HTTP URLs

quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

Vitess allows HTML injection in /debug/querylogz & /debug/env

ALSA: 6fire: Release resources at card release

Bluetooth: fix use-after-free in device_for_each_child()

erofs: handle NONHEAD !delta[1] lclusters gracefully

cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()

scsi: bfa: Fix use-after-free in bfad_im_module_exit()

RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()