aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

Apache Xerces C++: Use-after-free on external DTD scan

In Fluent Bit 2.1.8 through 2.2.1 a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.

BuildKit interactive containers API does not validate entitlements check

BuildKit possible host system access from mount stub cleaner

BuildKit possible race condition with accessing subpaths from cache mounts

BuildKit possible panic when incorrect parameters sent from frontend

Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot manager

Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate Privileges

IKEv2 misconfiguration can cause libreswan to abort and restart

Elasticsearch Uncontrolled Resource Consumption vulnerability

Elasticsearch elasticsearch-certutil csr fails to encrypt private key

python-ecdsa vulnerable to Minerva attack on P-256

jq has signed integer overflow in jv.c:jvp_array_write

aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

Integer overflow in raid5_cache_count in Linux kernel