Redhatinsights/incluster-checks: incluster-checks: privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node root

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

Redis: redis: out-of-bounds read via crafted cluster bus packets

Pen-drive: pen-drive: stored xss via unescaped cluster data in html report

Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives