Jonatan Männchen / EEF

Megaco flex scanner buffer overflow via oversized property parm name

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion

Symlink Following in Hex Package Export Allows Embedding Files Outside Project Root

Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write

Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification

Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS

Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS

Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records

Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic