An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targets

Go-getter may allow to arbitrary filesystem reads through git operations

Vite has a `server.fs.deny` bypass with queries

Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket

Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation

P11-kit: null dereference via c_derivekey with specific null parameters

path-to-regexp vulnerable to Denial of Service via sequential optional groups

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

PKCS7_verify Signature Validation Bypass in AWS-LC

PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

Axios affected by Denial of Service via __proto__ Key in mergeConfig

Malformed BRID/HHIT records can cause named to terminate unexpectedly

pyasn1 has a DoS vulnerability in decoder

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

Pam: improper hostname interpretation in pam_access leads to access control bypass

Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Thrift: Swift Compact Protocol integer overflow

Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

ptrace: slightly saner 'get_dumpable()' logic

Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret

Sssd: sssd: access control bypass via premature ldap access rule evaluation

Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.

Samba: group policy certificate enrollment uses http:// without validation

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method

Grub2: grub-core/gettext: integer overflow leads to heap oob write.

Grub2: fs/ufs: oob write in the heap