In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

Chromium: CVE-2025-4609 Incorrect handle provided in unspecified circumstances in Mojo

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

The x509 application adds trusted use instead of rejected use

Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

Unbounded recursion in Python Protobuf

Nodes can bypass dynamic resource allocation authorization checks

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of "Member name contains '..'" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain "x -> ../../../../../home/victim/.ssh" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in wh

Arbitrary writes via tarfile realpath overflow

Use-after-free in "unicode_escape" decoder with error handler

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.

Libsoup: null pointer dereference in libsoup may lead to denial of service

Tarfile extracts filtered members when errorlevel=0

Ring: some aes functions may panic when overflow checking is enabled in ring

net-imap rubygem vulnerable to possible DoS by memory exhaustion

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar