Yu Bao, PayPal Cyber Security Team

zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset

passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

t-digest 3.1 through 3.3 Denial of Service via NaN Centroid Means in MergingDigest.fromBytes

t-digest 3.1 through 3.3 Denial of Service via Unvalidated Length Fields in MergingDigest.fromBytes

zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods

zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close()