path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

Chromium: CVE-2024-5274 Type Confusion in V8

Avahi: avahi wide-area dns predictable transaction ids

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

GNOME libsoup before 3.6.1 has an infinite loop and memory consumption. during the reading of certain patterns of WebSocket data from clients.

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. 

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations

Apache Arrow R package: Arbitrary code execution when loading a malicious data file

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer

Newline confusion in credential helpers can lead to credential exfiltration in git

The sideband payload is passed unfiltered to the terminal in git

Integer overflow in libvpx

cap-std doesn't fully sandbox all the Windows device filenames

Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

Redis allows denial-of-service due to malformed ACL selectors