Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

gRPC-Go has an authorization bypass via missing leading slash in :path

A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths

FreeRDP has a heap-buffer-overflow in urb_select_configuration

FreeRDP has a global-buffer-overflow in crypto_base64_decode

FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call

Freeipa: idm: privilege escalation from host to domain admin in freeipa

Freeipa: idm: privilege escalation from host to domain admin in freeipa

Libxml: heap use after free (uaf) leads to denial of service (dos)

Libxml: type confusion leads to denial of service (dos)

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value