GNU cflow

• CVE-2025-8736 Medium 5.3 GNU cflow Lexer c.c yylex buffer overflow 0.2%
• CVE-2025-8735 Low 3.3 GNU cflow Lexer c.c yylex null pointer dereference 0.2%
• CVE-2023-2789 Low 3.5 GNU cflow parser.c parse_variable_declaration denial of service 1.2%