Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

Samba: remote code execution in samr

Possible arbitrary code execution during DNSSEC validation

Gnutls: gnutls: authentication bypass via nul character in username

protobufjs has an arbitrary code execution issue

Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code

pyOpenSSL DTLS cookie callback buffer overflow

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710,…

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

Gnutls: gnutls: denial of service via dtls zero-length fragment

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

Samba: samba: remote code execution in printing subsystem via unescaped job description

Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto

Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap

Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape

Cri-o: cri-o checkpoint restore bypasses destination security context

Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters

Heap Use-After-Free in the PKCS7_verify() Function

protobufjs: Code injection through bytes field defaults in generated toObject code

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

Code execution vulnerability in SWIG code generation in cmd/go

Kata Container to Guest micro VM privilege escalation

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4

Dpdk: dpdk: heap out-of-bounds read/write in gso header copy

Ovn: ovn: information disclosure via crafted dhcpv6 packets

FTP Command Injection via CRLF in basic-ftp

Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft

Podman: podman missing tls verification

Containers/image: digest type does not guarantee valid type

Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write

Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram

Apache Thrift: Swift Range crash in skip()

Kata Containers: CopyFile Policy Subversion via Symlinks

Vim modeline bypass via various options affects Vim < 9.2.0276

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()