Kata Containers: CopyFile Policy Subversion via Symlinks

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

fast-uri vulnerable to host confusion via failed IDN canonicalization

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

fast-uri vulnerable to path traversal via percent-encoded dot segments

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Sequelize v6 Vulnerable to SQL Injection via JSON Column Cast Type

Incorrect enforcement of email constraints in crypto/x509

PKCS7_verify Signature Validation Bypass in AWS-LC

PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion