ROS-20240418-08

A vulnerability in the Browserify-sign cryptographic functionality duplication package is related to the
upper bound check in the dsaVerify() function. Exploitation of the vulnerability could allow an attacker,
acting remotely, to create signatures that can be successfully verified by any public key,
resulting in a signature forgery attack

A vulnerability in the implementation of the _.zipObjectDeep() method of the Lodash library is related to the allocation of unlimited
memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service or execute arbitrary code.
or execute arbitrary code

A vulnerability in the MessagePack NodeJS/JavaScript msgpackr implementation is related to the ability for users to
to start hung threads by creating messages that looped the decoder. Exploiting the vulnerability
could allow an attacker acting remotely to cause a denial of service