Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

Mce: privilege escalation via excessive /etc/passwd permissions

Maestro: maestro: rest api write endpoints registered without authentication middleware

SpdyStream: DOS on CRI

Maestro: sql identifier injection via properties.* search filter and orderby field

Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

Assisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view users

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

ip-address: XSS in Address6 HTML-emitting methods

React Router vulnerable to XSS via Open Redirects

Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Cert-manager: potential dos when parsing specially crafted pem inputs