Requests `Session` object does not verify requests after making first request with verify=False

Chromium: CVE-2024-3516 Heap buffer overflow in ANGLE

Chromium: CVE-2024-3515 Use after free in Dawn

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_type_get_arity" function in core/iwasm/interpreter/wasm.h.

Stack exhaustion in Parse in go/build/constraint

Stack exhaustion in Decoder.Decode in encoding/gob

Stack exhaustion in all Parse functions in go/parser

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter