CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

protobufjs has an arbitrary code execution issue

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

protobufjs: Code injection through bytes field defaults in generated toObject code

Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header

node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

path-to-regexp vulnerable to Denial of Service via sequential optional groups

Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal

Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source header

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS