In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metacharacters, leading to an escape from the shell. All applications relying on this method in a security-critical path to handle user input are affected and could be exploited. In particular, because sendInput() sends a string to a terminal, a control character such as \x01 can be used during injection.

KissFFT Integer Overflow Heap Buffer Overflow via kiss_fftndr_alloc()

Vim: Command injection via backtick expansion in tag filenames

libyang - Heap Use-After-Free Write in XML Metadata Parsing

PostCSS has XSS via Unescaped </style> in its CSS Stringify Output

Long list of incoming EDNS options degrades performance

jq: Signed-int overflow in `stack_reallocate` (jq VM stack)

jq: Embedded NUL truncates top-level jq programs loaded with -f

Mako: Path traversal via double-slash URI prefix in TemplateLookup

ServiceAccount token disclosure via install-cni container logs

Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Windows DNS Client Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft 365 Copilot Elevation of Privilege Vulnerability

Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability

Microsoft Planetary Computer Pro Information Disclosure Vulnerability

Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability