Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume

Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body

SpdyStream: DOS on CRI

Golang-fips: golang fips zeroed buffer

Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip

Kubevirt: kubevirt: vm administration denial of service via guest agent

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

React Router vulnerable to XSS via Open Redirects

Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled

Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers

Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory

Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher