Codeready-ws: privilege escalation via excessive /etc/passwd permissions

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash

Podman: arbitrary file write when importing oci archive

pip can extract console_scripts and gui_scripts outside installation directory

wheel Allows Arbitrary File Permission Modification via Path Traversal

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure

Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers

Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory