Libarchive: libarchive: denial of service via malformed iso file processing

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules

gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion

Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame

Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1

CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1

HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path

Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash

jq: Stack Overflow in Recursive Object Merge

jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

jq: Wild stack write via signed-integer overflow in decNumber D2U() macro

Apache Thrift: Node.js web_server.js multi-vulnerability

Apache Thrift: TSSLTransportFactory.java hostname verification