Red Hat would like to thank Arpit Jain (GitHub handle: arpitjain099) for reporting this issue.

Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition

Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

Claircore: claircore: denial of service via unchecked type assertion in rpm header parser