Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

LIBPNG has a heap buffer overflow in png_set_quantize

Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation

Glib: integer overflow in in g_escape_uri_string()

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

pyasn1 has a DoS vulnerability in decoder

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Nodemailer: nodemailer: denial of service via crafted email address header

Docker: `PUT /containers/{id}/archive` executes container binary on the host