Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

ws: Uninitialized memory disclosure

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Go-getter may allow to arbitrary filesystem reads through git operations

Vite has a `server.fs.deny` bypass with queries

Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket

Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation

P11-kit: null dereference via c_derivekey with specific null parameters

path-to-regexp vulnerable to Denial of Service via sequential optional groups

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

PKCS7_verify Signature Validation Bypass in AWS-LC

PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

Axios affected by Denial of Service via __proto__ Key in mergeConfig

Malformed BRID/HHIT records can cause named to terminate unexpectedly

pyasn1 has a DoS vulnerability in decoder

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Openshift api admission checks does not enforce "custom-host" permissions

Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

Pam: improper hostname interpretation in pam_access leads to access control bypass

Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Thrift: Swift Compact Protocol integer overflow

Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

ptrace: slightly saner 'get_dumpable()' logic

Users: `root` appended to group listings

Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()