protobufjs: Code injection through bytes field defaults in generated toObject code

Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header

node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

path-to-regexp vulnerable to Denial of Service via sequential optional groups

Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal

Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source header