Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

protobufjs: Code injection through bytes field defaults in generated toObject code

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams

shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

net/sched: fix pedit partial COW leading to page cache corruption

netfilter: flowtable: strictly check for maximum number of actions

Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler

Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints

Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

fast-uri vulnerable to host confusion via failed IDN canonicalization

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Allocation of Resources Without Limits or Throttling in axios

Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Long list of incoming EDNS options degrades performance

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

ws: Uninitialized memory disclosure

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Go JOSE affect by a panic in JWE decryption

Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console

Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console

Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding

Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled

Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege…