Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

Forman: foreman: remote code execution via command injection in websocket proxy

Foreman: command injection in foreman-rake database tasks

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latching

Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

Foreman: command injection in foreman-tail

Foreman: ssti and insecure deserialization in foreman-rake configuration

Foreman: unauthenticated information disclosure via provisioning token validation flaw

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters

ws: Memory exhaustion DoS from tiny fragments and data chunks

ws: Uninitialized memory disclosure

Python-Multipart: Denial of Service via unbounded multipart part headers

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

AIOHTTP Vulnerable to Deserialization of Untrusted Data

Rubygem-hammer_cli: command injection via insecure editor invocation

Foreman: api filter lookup ignores a search-limited filter permission

Pulp-ansible: bearer tokens are reused across remotes in a worker

Pulp-container: registry credentials are reused across remotes in a worker

Rubygem-katello: sql injection in registry proxy via labels

Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup

Foreman: foreman: unauthorized modification of host configurations via broken access control

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

Golang-fips: golang fips zeroed buffer

Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests

Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data

Foreman: domain and subnet interface api skips host search filters

Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypass

Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content

Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup

Pulp-rpm: distribution tree publish creates directories from .treeinfo ids

Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config

Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass

Rubygem-katello: improper authorization logic allows resource enumeration

Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check

Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters

Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction

Ketello: katello content view history api cross-organization authorization bypass

Foreman: foreman: information disclosure via improper validation of nested request parameters

Katello: missing repository authorization in content_uploads exposes cross-product content existence