VU#431093: TCG TPM 2.0 reference code found vulnerable to information leakage and timing side-channel attacks

CERT/CC vulnerability notes describe critical security issues across TPM 2.0 reference code, OpenCart, stb_truetype, SOGo, VPS.org deployment templates, SGLang, and the foreUP golf management API. Impacts include unauthenticated or privileged remote code execution, cryptographic key and credential exposure, timing side channels, directory traversal leading to web shells, heap out-of-bounds reads, stored XSS with mailbox compromise, insecure default credentials, SSRF and local file disclosure, payment credential leakage, and broken object-level authorization. Several issues reportedly lack aика