Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection

Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters

Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O…

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Denial of service in github.com/jackc/pgproto3/v2

path-to-regexp vulnerable to Denial of Service via sequential optional groups

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Nodemailer: nodemailer: denial of service via crafted email address header

Apache Thrift: TSSLTransportFactory.java hostname verification

Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed

Submariner-operator: rbac permissions can allow for the spread of node compromises

Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity

SpdyStream: DOS on CRI

Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps

Multicluster-observability-addon: multicluster-observability-addon: possible unauthenticated debug/metrics endpoint via cmdfactory.newcontrollercommandconfig (confirmed exposed by engineering)

Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Coredns: cd bit response is cached and served later

Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results