manus-use

OpenAM before 16.1.4 PKCE Bypass in OAuth 2.0 Device Authorization Flow

OpenAM before 16.1.4 SSRF via UMA Scope Description URLs

Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy

Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy

Vikunja before 2.7.1 Memory Exhaustion DoS via Trello, Todoist and Microsoft To Do Migrations

undici vulnerable to cross-user cache disclosure via same-origin redirect

undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay

phpMyFAQ before 4.1.11 and 4.2.0-beta.3 Account Enumeration via WebAuthn prepare-login

Froxlor before 2.3.15 Authorization Bypass via Mysqls.add API

SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization