Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

Improper Access Control in Packagist librenms/librenms prior to 22.2.0.

Improper Privilege Management in Packagist snipe/snipe-it prior to 5.3.9.

Code Injection in GitHub repository publify/publify prior to 9.2.8.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.

Cross-site Scripting (XSS) – Generic in Packagist librenms/librenms prior to 22.1.0.