Open Source Vulnerabilities

AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connectors

AzuraCast before 0.24.0 Missing Authorization via Station Waveform Endpoints

AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()

AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone

AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config

Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser

Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing

Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments

SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization

SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass

SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass

SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses

SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collision

SurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index Planner

SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends

SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style Invocations

Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Key

Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update

Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 Session Permission Bypass via upgradeToRevocableSession

FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry

FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2

FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token

FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel

FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel

FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload

FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control

FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA

FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP

FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics

FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet

FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet

FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length

FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module

FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer()

FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion

FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder

FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder

FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion

FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate

FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE

FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response

FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging

FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST

FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder

FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers

Out-of-bounds Write in µD3TN

Missing Release of Memory after Effective Lifetime in µD3TN

Out-of-bounds Read in µD3TN

Out-of-bounds Write in µD3TN