Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

fast-uri vulnerable to host confusion via failed IDN canonicalization

ws: Memory exhaustion DoS from tiny fragments and data chunks

ws: Uninitialized memory disclosure

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Incorrect enforcement of email constraints in crypto/x509

CoreDNS Loop Detection Denial of Service Vulnerability

CoreDNS ACL Bypass

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

React Router vulnerable to XSS via Open Redirects

node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

Rhcl: sharedsecretref can be used to leak secrets severity

Rhcl: authorino denial of service through authpolicy with sharedsecretref severity

Rhcl: authpolicy callbacks result in denial of service in authorino severity

Cert-manager: potential dos when parsing specially crafted pem inputs

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled