LiteLLM: Authenticated command execution via MCP stdio test endpoints

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

Odh-dashboard: odh dashboard kubernetes service account exposure

A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace

Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy

Safe Mode Bypass in keras-team/keras

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Traefik - Denial of Service via HTTP/2 Request Handling

JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection

Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers