[shibboleth Single TransientID Mapped to Multiple Principals]

[mailutils: sql injection vulnerability in sql authentication module]

[get_groups does not always returns the group of the action]

[file descriptor leak when a Compose file uses the "include" directive]

[Possible SQL injection in freeradius]

[SQL Injection in host_templates.php]

[too lenient UTF-8 decoder in kjs/function.cpp]

[pure-ftpd-mysql: any problems with a home dir will allow rw to the entire filesystem]

In libexpat before 2.7.4, the doContent function does not properly det ...

The NixOs Odoo package is an open source ERP and CRM system. From 21.1 ...

fast-xml-parser allows users to validate XML, parse XML to JS object, ...

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit ...

gradle-completion provides Bash and Zsh completion support for Gradle. ...

tcpflow is a TCP/IP packet demultiplexer. In versions up to and includ ...

OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, cer ...

OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the ...

In Bun before 1.3.5, the default trusted dependencies list (aka trust ...

In GnuPG before 2.5.17, a long signature packet length causes parse_si ...

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2da ...

In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message c ...