Gnutls: gnutls: authentication bypass via nul character in username

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

lodash vulnerable to Code Injection via `_.template` imports key names

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710,…

Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

protobufjs: Code injection through bytes field defaults in generated toObject code

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams

shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

net/sched: fix pedit partial COW leading to page cache corruption

netfilter: flowtable: strictly check for maximum number of actions

Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler

Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints

Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

fast-uri vulnerable to host confusion via failed IDN canonicalization

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Allocation of Resources Without Limits or Throttling in axios

Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Long list of incoming EDNS options degrades performance

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

ws: Uninitialized memory disclosure

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Go JOSE affect by a panic in JWE decryption

Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console

Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console