Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Vim affected by Command injection via newline in glob()

Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding

Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled

Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

smb: client: reject userspace cifs.spnego descriptions

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege…

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Icu: stack buffer overflow in the srbroot::addtag function

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Samba: group policy certificate enrollment uses http:// without validation

Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

SpdyStream: DOS on CRI

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect

React Router vulnerable to XSS via Open Redirects

wheel Allows Arbitrary File Permission Modification via Path Traversal

Libssh: out-of-bounds read in sftp_handle()

No description published yet

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled