Morningbread

**Name of the Vulnerable Software and Affected Versions** Vim versions prior to 9.2.0699 **Description** Python omni-completion in the text editor executes reconstructed function and class definitions from the current buffer using the `exec()` function to populate the completion dictionary. Because docstrings are inserted verbatim between triple quotes without escaping, a specially crafted buffer can break out of the literal string to execute arbitrary Python code. This occurs within the `runtime/autoload/python3complete.vim` and `pythoncomplete.vim` scripts. An attacker can trigger this by inducing a user to open or paste a malicious file and then initiate omni-completion, leading to arbitrary code execution under the user's privileges. **Recommendations** Update to version 9.2.0699.

**Name of the Vulnerable Software and Affected Versions** Mutt versions 1.5.2 through 2.2.12 **Description** The issue is related to a null pointer dereference when viewing a specially crafted email. This could allow a remote attacker to cause a denial of service. **Recommendations** For versions 1.5.2 through 2.2.12, update to a version outside of this range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mutt versions 1.5.2 through 2.2.12 **Description** The issue is related to a null pointer dereference when composing from a specially crafted draft message. This can potentially allow an attacker to cause a denial of service. The vulnerability is associated with errors in handling message headers. **Recommendations** For Mutt versions 1.5.2 through 2.2.12, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the use of draft messages from untrusted sources until a patch is available.