Axios: Allocation of Resources Without Limits or Throttling in axios

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

Dracut: dracut: root code execution via dhcp options command injection

Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

ws: Uninitialized memory disclosure

No description published yet

Quadratic string concatentation in consumeComment in net/mail

Crash when handling long CNAME response in net

Quadratic string concatenation in consumePhrase in net/mail

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

Unexpected work during chain building in crypto/x509

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Go JOSE affect by a panic in JWE decryption

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Koa has Host Header Injection via `ctx.hostname`

Axios affected by Denial of Service via __proto__ Key in mergeConfig

Memory exhaustion in query parameter parsing in net/url

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console

Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Vim affected by Command injection via newline in glob()

Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding

Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled

Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

smb: client: reject userspace cifs.spnego descriptions

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege…

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Icu: stack buffer overflow in the srbroot::addtag function