Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Apache Thrift: C++ JSON OOB read

SpdyStream: DOS on CRI

Golang-fips: golang fips zeroed buffer

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

React Router vulnerable to XSS via Open Redirects

Keycloak: xss via assertion consumer service url in saml post-binding flow

node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

Apache Thrift: c_glib dispatch stack overflow

Traefik mTLS bypass via fragmented ClientHello SNI extraction failure

Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure