cli_permissions.conf: deny option does not work for disallowing shell commands : (GHSA-c7p6-7mvq-8jq2)
Using malformed From header can forge identity with “;” or NULL in name portion : (GHSA-2grh-7mhv-fcfw)
Path traversal via AMI ListCategories allows access to outside files: (GHSA-33×6-fj46-6rfh)
A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used (GHSA-v428-g3cw-7hv9)
Write=originate, is sufficient permissions for code execution / System() dialplan (GHSA-c4cg-9275-6w44)