Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

gRPC-Go has an authorization bypass via missing leading slash in :path

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter

A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths

FreeRDP has a heap-buffer-overflow in urb_select_configuration

FreeRDP has a global-buffer-overflow in crypto_base64_decode

FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call

Freeipa: idm: privilege escalation from host to domain admin in freeipa

Freeipa: idm: privilege escalation from host to domain admin in freeipa

Libxml: heap use after free (uaf) leads to denial of service (dos)

Libxml: type confusion leads to denial of service (dos)

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

Samba: samba: remote code execution in printing subsystem via unescaped job description

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value