systemd (systemd-tmpfiles) versions prior to 236 suffer from an fs.protected_hardlinks=0 local privilege escalation vulnerability.
ab5c7f27e35d1f4741577e57058839ae024c0d913dfc8c629d2aad07f55c2130
Drupal Mass Contact third party module version 6.x suffers from an access bypass vulnerability.
9714d96df52059fd1392b9ce90bc0e494290f9488628faa8127b377806fb65a3