In msgpack-ruby < 1.8.7, the JRuby Java decoder (ext/java/) allocates arrays/byte buffers directly from attacker-controlled array32/str32/bin32 header sizes before validating payload length. A small network message can force multi‑GiB allocations via MessagePack.unpack or MessagePack::Unpacker, exhausting shared JVM heap (DoS). Upgrade to 1.8.7 to mitigate.

In Pillow `

SQL injection in the Core of Ivanti Endpoint Manager (EPM) before 2024 SU8 allows remote unauthenticated attackers over the network to execute crafted SQL commands that can lead to remote code execution. Affected: EPM 2024 SU7 and prior. Upgrade to EPM 2024 SU8 to mitigate.

systeminformation `

Affects litellm proxy deployments with azure/ or azure_ai/ models when AZURE_API_KEY/AZURE_OPENAI_API_KEY are unset. Request body blocklist misses Entra params (tenant_id,client_id,client_secret,azure_username,azure_password,azure_scope), letting authenticated users override creds via POST /v1/chat/completions or /v1/images/generations and leak env vars (e.g., LITELLM_MASTER_KEY) via error messages. Upgrade to 1.106.9,1.108.6,1.109.1,1.110.0-rc.2 to mitigate, or block params upstream.

Apache Airflow CeleryExecutor runs callback workloads (ExecuteCallback for deadline-alert callbacks) without validating the workload auth token. Any actor able to write to the Celery broker can enqueue a forged callback and trigger arbitrary code execution on every CeleryExecutor worker without Airflow credentials. Affects apache-airflow-core < 3.4.0. Upgrade to apache-airflow 3.4.0+ where callbacks are claimed via the Execution API with token validation.