- CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value
- CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
- CVE-2026-52859 Vim: Out-of-bounds Read in Terminal Screen Snapshot
- CVE-2026-52860 Vim: Arbitrary Code Execution via Python Omni-Completion
- CVE-2026-34180 Heap Buffer Over-read in ASN.1 Content Parsing
- CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
- CVE-2026-47162 Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
- CVE-2026-42766 Possible NULL Dereference in Password-Based CMS Decryption
- CVE-2026-42767 NULL Pointer Dereference in CRMF EncryptedValue Decryption
- CVE-2026-52858 Vim: Arbitrary Code Execution via Python Omni-Completion
- CVE-2026-34183 Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
- CVE-2026-9076 Out-of-Bounds Read in CMS Password-Based Decryption
- CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
- CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages
- CVE-2026-7383 Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion