漏洞公告

pypdf: Possible large memory usage for large /ToUnicode streams

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure

Hono: Proxy Helper does not remove response headers listed in the `Connection` header

Hono: Algorithmic Complexity DoS in Language Middleware

Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams

pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules

CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames

CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions

CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()

jsii-diff: Command Injection via npm: package argument

Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state

API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)

SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header

Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint

go-git: Malicious reference names may modify files outside the reference storage

go-git: Worktree operations may follow symlinks

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)

GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()