An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Go JOSE affect by a panic in JWE decryption

Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console

Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding

Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled

Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege…

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation

Samba: missing access check on reparse point operations

SpdyStream: DOS on CRI

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect

ip-address: XSS in Address6 HTML-emitting methods

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh