Using malformed From header can forge identity with “;” or NULL in name portion : (GHSA-2grh-7mhv-fcfw)
Path traversal via AMI ListCategories allows access to outside files: (GHSA-33×6-fj46-6rfh)
A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used (GHSA-v428-g3cw-7hv9)
Write=originate, is sufficient permissions for code execution / System() dialplan (GHSA-c4cg-9275-6w44)
res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests (GHSA-qqxj-v78h-hrf9)