Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

Samba: remote code execution in samr

Gnutls: gnutls: authentication bypass via nul character in username

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

lodash vulnerable to Code Injection via `_.template` imports key names

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710,…

Libxml: heap use after free (uaf) leads to denial of service (dos)

Libxml: type confusion leads to denial of service (dos)