Redhatinsights/incluster-checks: incluster-checks: privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node root

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

Redis: redis: out-of-bounds read via crafted cluster bus packets