This issue was discovered by Thibault Guittet (Red Hat).

Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials

Openshift-controller-manager: elevated build pods can lead to node compromise in openshift

Rhcs: memory leak during https connection leads to denial of service

Fence-agents-remediation: fence agent command line options leads to remote code execution

Packagekitd: use-after-free in idle function callback

Openshift-console: unauthenticated data exposure

Openshift-console: unauthenticated installation of helm charts

Yggdrasil: local privilege escalation in yggdrasil

Openshift-dedicated: hive: rce through aws/kubernetes client configuration leads to privilege escalation

Openshift-dedicated: must-gather-operator: yaml template injection leads to privilege escalation