漏洞公告

Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability

Remotion: arbitrary file write vulnerability

Remotion: remote code execution (RCE) vulnerability

Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`

aws-cdk-lib: OS Command Injection in NodejsFunction Bundling

Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature

Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted

Netty: Unbounded pre-allocation in RedisArrayAggregator from RESP array length

Netty: Wrapping plain trust manager silently disables hostname verification

Netty: QUIC stateless reset token material exposed through header-visible connection IDs

Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation

Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse

Nest: Middleware Bypass on Fastify via Trailing Slash

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient