Erlang/OTP SSH Has Strict KEX Violations

Chromium: CVE-2025-4664 Insufficient policy enforcement in Loader

OPA server Data API HTTP path injection of Rego

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

GitHub: CVE-2025-46334 Git Malicious Shell Vulnerability

Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

Chromium: CVE-2025-4609 Incorrect handle provided in unspecified circumstances in Mojo

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

The x509 application adds trusted use instead of rejected use

Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

Unbounded recursion in Python Protobuf

Nodes can bypass dynamic resource allocation authorization checks