Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token

Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF)

Non-CA certificate accepted as intermediate issuer in public_key path validation

Unbound: heap-buffer-overflow in unbound