Str1ckl4nd

Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing

Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route

Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records

Vikunja before 2.6.0 Denial of Service via Avatar Upload

vikunja before 2.6.0 Resource Exhaustion via CSV Migration

Vikunja before 2.6.0 Denial of Service via Decompression Bomb

Vikunja before 2.6.0 Resource Exhaustion via Planka Migration

vikunja before 2.6.0 Denial of Service via unbounded filter recursion

webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

undici WebSocket client vulnerable to denial of service via cumulative fragment bypass