musl libc < 1.2.7 has multiple integer overflows when compiling an untrusted regex via regcomp, causing incorrect allocation sizes and out-of-bounds heap writes. Remote reachability is possible where network input is passed to regcomp, enabling memory corruption with potential RCE/DoS. Upgrade to 1.2.7+ and avoid compiling attacker-controlled regexes to mitigate.

On Linux systems using musl libc with PAM disabled, sshd password auth can be bypassed when musl crypt() returns ”*” on failure (e.g., SHA512 crypt() password length >256 bytes), colliding with ”*” used as a locked password field. This can make logins incorrectly ACCEPTED for ”*” accounts. Upgrade to OpenSSH 10.6p2 to mitigate.

GnuPG for Windows 2.5.21 inherits insecure default DACLs on C:ProgramData, allowing BUILTINUsers to create arbitrary subdirs. A low-priv attacker can precreate the expected GnuPG config directory and drop malicious config files consumed by GnuPG components, leading to code execution in the victim user’s security context. Mitigate by fixing C:ProgramData ACLs and upgrade to GnuPG 2.5.24.

**Airbyte `

Unsafe reflection in amazon-redshift-jdbc-driver < 2.3.0 allows reflection injection when an attacker can influence the JDBC connection URL parameters or the AWS credentials profile handling. If a suitable class exists on the application classpath, the attacker can trigger arbitrary code execution in the application context. Upgrade to 2.3.0+ to mitigate.

MongoDB Node.js Driver connection management can return a pooled socket to the pool while prior response data is still pending, causing reply/request mismatches when optional client-side operation timeout is enabled. Remote unauthenticated app users can trigger cross-request data disclosure and incorrect results/failed ops. Affects 6.11.0