CWE-471

i18next: Shared built-in corruption through inherited-key deepExtend recursion

i18next · i18next

LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling

LibreDWG · libredwg

Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

digitalbazaar · forge

msgpack5: Decoding negative int64 values mutates the input buffer

mcollina · msgpack5

PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

jpadilla · pyjwt

vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor

patriksimek · vm2

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to…

Jenkins Project · Jenkins GitLab Plugin

Composition lookup can potentially poison base function in Spring Cloud Function

Spring · Spring Cloud Function

Azure Active Directory Elevation of Privilege Vulnerability

Microsoft · Azure Active Directory

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

angular · angular