VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logic

CERT/CC advisories describe multiple vulnerabilities affecting TLS/X.509 name-constraint validation, Bisheng LLM DevOps, Komodo Periphery, Lowcoder, Shopware, and Thelia. The most severe issues include unauthenticated Bisheng administrative takeover, authenticated root command injection in Komodo Periphery, cross-tenant data access in Lowcoder, and Shopware stored XSS enabling administrator token theft and possible server-side code execution. TLS name-constraint records primarily involve library-specific validation inconsistencies and bypass conditions, with mixed remediation statuses.