Schwachstellen, die jetzt zählen.

node-forge: node-forge: Authorization bypass via improper OID encoding

node-forge: node-forge: Signature policy bypass via improper certificate parameter selection

### Summary When verifying a certificate, node-forge chose the RSA padding scheme (PKCS#1 v1.5 or RSASSA-PSS) and PSS parameters from the issuer certificate's own signature algorithm instead of the certificate being verified. A certificate labeled as signed with RSASSA-PSS could pass `verifyCertificateChain()` with a PKCS#1 v1.5 signature. Fixed in node-forge 1.4.1. ### Details `certificate.verify(child)` in `lib/x509.js` hashes the child's TBSCertificate with the digest of…

glob: glob: Denial of Service (DoS) via incomplete traversal cancellation

vtk: vtk: Denial of Service via buffer overflow in vtkDEMReader

vtk: vtk: Denial of Service via crafted PNG file

vtk: vtk: Denial of Service via out-of-bounds read in vtkChacoReader

vtk: vtk: Denial of Service via buffer overflow in vtkBMPReader

vtk: vtk: Denial of Service via heap-based buffer overflow in vtkWindBladeReader

joi: joi: Denial of Service via inefficient regular expression in email validation

nomad: Nomad: Privilege escalation via symlink following during data migration

nomad: Nomad: Information disclosure via cross-namespace authorization bypass

python: python: Security bypass via null byte truncation in socket.getaddrinfo()

botan: Botan: Integer overflow when reporting block size in FFI can cause memory corruption

botan: botan: Certificate validation bypass via missing OCSP response signature verification

botan: botan: Password policy bypass via embedded null byte in Python bindings

botan: Botan: Server-Side Request Forgery via OCSP client HTTP redirect

botan: botan: Predictable random number generation via empty buffer request

minimatch: minimatch: Denial of Service via crafted glob pattern expansion

@sigstore/oci: @sigstore/oci: credential disclosure via unvalidated upload location

github.com/kubeflow/pipelines: Kubeflow Pipelines: Denial of Service via unbounded archive decompression

github.com/kubeflow/pipelines: Kubeflow Pipelines: Information disclosure via unauthorized log retrieval handler

@sd-jwt/core: @sd-jwt/decode: SD JWT JS: Authorization bypass via silent omission of tampered disclosures

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it…

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec.

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the…

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control.

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery…

keepassxc: KeePassXC: Denial of Service (DoS) via out-of-bounds write in browser integration