Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user

Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy

Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

Inefficient candidate hostname parsing in crypto/x509

Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

ip-address: XSS in Address6 HTML-emitting methods

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

React Router vulnerable to XSS via Open Redirects

Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation

pip can extract console_scripts and gui_scripts outside installation directory

wheel Allows Arbitrary File Permission Modification via Path Traversal

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace