PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS

PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)

PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes

Orc discount Markdown markdown.c compile recursion

NGINX ngx_http_charset_module vulnerability

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

jq: stack overflow in deep structural equality

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Squid: Memory disclosure in FTP gateway

Windows Boot Manager Security Feature Bypass Vulnerability

Microsoft Graph Information Disclosure Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Dynamics 365 Elevation of Privilege Vulnerability

Dynamics 365 Customer Voice Spoofing Vulnerability