An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to incorrect handling of file.

Cross-site Scripting (XSS) – Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.

mruby is vulnerable to NULL Pointer Dereference

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)