Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations

Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

OpenFGA Playground Preshared Key Exposure

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation

Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms

Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder

Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check