Bjrjk

**Name of the Vulnerable Software and Affected Versions** bzip2 crate versions prior to 0.4.4 **Description** The issue allows attackers to cause a denial of service via a large file that triggers an integer overflow in `mem.rs`. This can lead to a denial of service (DoS) vector. Both `Decompress` and `Compress` implementations can enter into infinite loops given specific payloads that trigger it. **Recommendations** For versions prior to 0.4.4, update the `bzip2` crate to 0.4.4 to resolve the issue. As a temporary workaround, consider avoiding the use of the crate with untrusted data until the update is applied.

**Name of the Vulnerable Software and Affected Versions** LinuxASMCallGraph versions prior to commit 20dba06bd1a3cf260612d4f21547c25002121cd5 **Description** The issue is related to incorrect filtering rules of uploaded files, allowing attackers to cause remote code execution on the server side via uploading a crafted ZIP file. This can be exploited by uploading a specially crafted ZIP file, enabling an attacker to execute arbitrary code remotely. **Recommendations** For versions prior to commit 20dba06bd1a3cf260612d4f21547c25002121cd5, update to a version that includes the patch from commit 20dba06bd1a3cf260612d4f21547c25002121cd5 to resolve the issue. As a temporary workaround, consider restricting the upload of ZIP files or implementing additional filtering rules for uploaded files to minimize the risk of exploitation.