NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Gnutls: fix use-after-free in gnutls_pkcs11_token_set_pin

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: authentication bypass via nul character in username

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Global Buffer Overflow in GNU gzip

Predictable Temporary File in GNU gzip

uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided

rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check

rust-openssl: Incorrect bounds assertion in aes key wrap

rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length

rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1