santhreal

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass via Comments and Attachments API

SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fields

OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page

OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions

OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri

OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding

ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder

WWBN AVideo Missing Authorization via video_from_program API

WWBN AVideo Missing Authorization via like.json.php