漏洞公告

CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation

CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced

CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass

CoreWCF: SAML token replay protection is inoperative

CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution

CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance

CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade

CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate

CoreWCF: WS-Security signature substitution via document-wide Signature lookup

CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake

Python Liquid: Infinite loop when parsing malformed `{% case %}` tags

Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation

Oj: Use-After-Free in Oj::Doc Iterators via Reentrant Close

Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent

parse-server: Stored XSS via non-standard file extension bypassing file upload extension blocklist

Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input

jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories

jupyterlab-git extension: Stored XSS leading to RCE

Oj: intern.c form_attr (uninitialized stack read)

Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders

Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters