Security notes, platform updates, and practical defensive guidance.
In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START omfs_fill_super() rejects oversized s_sys_blocksize values (> PAGE_SIZE), but it does not re...
Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. From 1.0.0 until 1.10.6 and 2.14.3, Faraday::NestedParamsEncoder, the default nested query parameter encoder/decode...
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NAN. The issue is caused by the interactio...
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read lock 32,768 times. The lock stores a thread...
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock obj...
OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage
OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints
OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering
Mise's local credential_command executes untrusted config
An issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows...
An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to...
MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS...