Several software products have high-severity vulnerabilities, exposing systems to significant risks. Gotenberg's Docker API allows attackers with control of metadata values to inject commands, leading to file manipulation and potential system compromise. OpenVPN's oauth2 plugin incorrectly admits unauthorized clients in experimental plugin mode before version 1.27.3. Postiz-app's Docker build workflow enables unauthenticated code execution and GITHUB_TOKEN exfiltration. GeoVision's GV-VMS V20 has a stack overflow vulnerability that enables full code execution due to a lack of ASLR. Microsoft Azure DevOps allows information disclosure, potentially exposing sensitive data. Eclipse BaSyx has a path traversal vulnerability that could lead to RCE. OpenCart, WordPress plugins (MStore API, Download From Files, TheCartPress, and OpenCATS) have vulnerabilities for session fixation, privilege escalation, and file upload, enabling unauthorized access or code execution. Eclipse Equinox OSGi has remote code execution via its console interface. The Mentoring WordPress plugin has a privilege escalation vulnerability allowing attackers to create administrator accounts. Tegsoft's Online Support Application is vulnerable to cross-site scripting (XSS). VM2, a Node.js sandbox, has multiple sandbox breakout vulnerabilities, resulting in potential host system command execution.