Rubygem-hammer_cli: command injection via insecure editor invocation

Rubygem-katello: sql injection in registry proxy via labels

Foreman: foreman: unauthorized modification of host configurations via broken access control

Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

Inefficient candidate hostname parsing in crypto/x509

Foreman: satellite: graphql api permission bypass leads to information disclosure

Rubygem-katello: katello: denial of service and potential information disclosure via sql injection

Rubygem-katello: improper authorization logic allows resource enumeration

Ketello: katello content view history api cross-organization authorization bypass

Foreman: foreman: information disclosure via improper validation of nested request parameters

Katello: missing repository authorization in content_uploads exposes cross-product content existence