Arjun Basnet from Securin

NetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution

Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling

Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length

Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message

Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB

Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB

Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument

Uncontrolled recursion in DCMTK xml2dcm allows denial of service

Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service