Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint

Apache Thrift: Swift Range crash in skip()

Gitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dos

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Apache Thrift: Go TFramedTransport uint32 overflow

Denial of service in github.com/buger/jsonparser

path-to-regexp vulnerable to Denial of Service via sequential optional groups

fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Apache Thrift: Swift Compact Protocol integer overflow