An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplying a crafted UPDATE message.

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.

libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds

pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow

Incomplete control character validation in http.cookies

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

Libsoup: libsoup: header and http request injection via crlf injection

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

Amplification vulnerabilities via self-pointed glue records

A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass

Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I

Addressable has a Regular Expression Denial of Service in Addressable templates

CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports

ECH parsing heap buffer overflow

Buffer overflow in CRL number parsing in wolfSSL