Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

Samba: group policy certificate enrollment uses http:// without validation

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

SpdyStream: DOS on CRI

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect

Libssh: out-of-bounds read in sftp_handle()

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Openshift-console: openshift console: server-side request forgery

Coredns: cd bit response is cached and served later

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

Buildah: buildah allows arbitrary directory mount

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled