Packet of death with DNSCrypt

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

libexpat before 2.7.5 allows an infinite loop while parsing DTD content.

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.

Potential DoS via quadratic complexity in unicodedata.normalize()

astral-tokio-tar insufficiently validates PAX extensions during extraction

Squid has Denial of Service in ICP Response handling

Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass

NGINX ngx_http_mp4_module vulnerability

GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashes

jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

Improper key_share validation in TLS 1.3 HelloRetryRequest

Integer Overflow in Certificate Chain Allocation

JsBraceDepth Context Tracking Bugs (XSS) in html/template

Unbounded allocation for old GNU sparse in archive/tar

Infinite loop in github.com/antchfx/xpath

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

Inefficient policy validation in crypto/x509