Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy

Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

ip-address: XSS in Address6 HTML-emitting methods

Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation

pip can extract console_scripts and gui_scripts outside installation directory

Libxslt: use-after-free with key data stored cross-rvt

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

Libxml2: stack buffer overflow in xmllint interactive shell command handling