A high-severity flaw in the npm toml package allows attackers to freeze Node.js processes with small, malicious files, exposing applications that parse untrusted data.
A parser flaw in Eclipse Vert.x allows malicious Redis servers to trigger massive memory allocations that crash application event loops and deny service.