Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello

wolfSSL wolfSSL wolfssl wolfssl

DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension

wofSSL wolfSSL wolfssl wolfssl

thread-amount is Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOS

jzeuzs thread-amount

Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify

wolfSSL wolfSSL wolfssl wolfssl

Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug

RooCodeInc Roo-Code roocode roo_code

Forward Secrecy Violation in WolfSSL TLS 1.3

wolfSSL wolfSSL wolfssl wolfssl

SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results

authzed spicedb authzed spicedb

Minder does not sandbox http.send in Rego programs

mindersec minder mindersec minder

md-to-pdf is vulnerable to arbitrary JavaScript code execution when parsing front matter

simonhaenisch md-to-pdf

Langfuse SSO Account Takeover via CSRF or phishing attack

langfuse langfuse langfuse langfuse +1个

LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

langchain-ai langchain langchain-ai langchain

PJSIP is vulnerable to buffer overflow in Opus PLC

pjsip pjproject

ESP32-P4 JPEG Decoder Header Parsing Vulnerability

espressif esp-idf espressif esp-idf +1个

Black Duck SCA Project Privilege Escalation

Black Duck Black Duck SCA

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPa...

Apple iPadOS Apple iOS and iPadOS +2个

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain n...

Apple macOS Apple Safari +2个

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS 17....

Apple macOS Apple iPadOS +8个

A parsing issue in the handling of directory paths was addressed with improved path validation. This...

Apple macOS apple macos

Zegen Core <= 2.0.1 - Cross-Site Request Forgery to Arbitrary File Upload

zozothemes Zegen Core

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Win...

AWS Wickr AWS Wickr Gov +1个