Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller

Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Apache Thrift: Go TFramedTransport uint32 overflow

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Tempo query limit results in unbounded memory allocation

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results