cryptography has incomplete DNS name constraint enforcement on peer names

Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access

Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption

Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()

Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options

Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial

Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation

Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

Handlebars.js has JavaScript Injection via AST Type Confusion

python-ecdsa: Denial of Service via improper DER length validation in crafted private keys

Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection

Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

Forge has signature forgery in Ed25519 due to missing S > L check

Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

Apache HTTP Server: Off-by-one OOB reads in AJP getter functions