Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters

Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O…

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Denial of service in github.com/jackc/pgproto3/v2

path-to-regexp vulnerable to Denial of Service via sequential optional groups

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Nodemailer: nodemailer: denial of service via crafted email address header

Apache Thrift: TSSLTransportFactory.java hostname verification