Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Samba: group policy certificate enrollment uses http:// without validation

Inefficient candidate hostname parsing in crypto/x509

Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

SpdyStream: DOS on CRI

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)

Graphql: denial of service (dos) vulnerability via graphql batching

Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect

React Router vulnerable to XSS via Open Redirects

wheel Allows Arbitrary File Permission Modification via Path Traversal

Libssh: out-of-bounds read in sftp_handle()

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Openshift-console: openshift console: server-side request forgery

Graphql: information disclosure via graphql introspection in openshift

Openshift-console: unauthenticated data exposure

Buildah: buildah allows arbitrary directory mount