Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

lodash vulnerable to Code Injection via `_.template` imports key names

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Kata Containers: CopyFile Policy Subversion via Symlinks

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

fast-uri vulnerable to host confusion via failed IDN canonicalization

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

fast-uri vulnerable to path traversal via percent-encoded dot segments

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

ip-address: XSS in Address6 HTML-emitting methods

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers