giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

libp2p nodes vulnerable to attack using large RSA keys

Postgresql: extension script @substitutions@ within quoting allow sql injection

Denial of service via chunk extensions in net/http

Arbitrary code execution during build via line directives in cmd/go

Improper handling of special tags within script contexts in html/template

Improper handling of HTML-like comments in script contexts in html/template

Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()

Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()

Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()

Kernel: netfilter: xtables out-of-bounds read in u32_match_it()

Kernel: ebpf: insufficient stack type checks in dynptr

Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()