Rollup 4 has Arbitrary File Write via Path Traversal

External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector

Prometheus Azure AD remote write OAuth client secret exposed via config API

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Tempo query limit results in unbounded memory allocation

SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)

Apache Thrift: TSSLTransportFactory.java hostname verification

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Tempo-operator: tempo operator: query rbac bypass

React Router vulnerable to XSS via Open Redirects

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure