VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logic

The document aggregates CERT/CC vulnerability notes covering severe authentication and authorization flaws, OS command injection, stored XSS with possible RCE, cross-tenant data exposure, and TLS/X.509 Name Constraints inconsistencies. The highest-impact issues include unauthenticated Bisheng administrator takeover, authenticated Komodo Periphery command execution as root, and Shopware administrator token theft potentially leading to plugin-based RCE. Several entries include CVE identifiers, while others describe library-specific validation differences or disputed findings.