Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-03	CVE-2022-21949	XXE vulnerability in Opensuse Open Build Service A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. network low complexity opensuse CWE-611 critical	9.0
2018-06-13	CVE-2011-4183	Unrestricted Upload of File with Dangerous Type vulnerability in Opensuse Open Build Service A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. network low complexity opensuse CWE-434 critical	9.8
2018-06-08	CVE-2014-0593	Improper Input Validation vulnerability in Opensuse Open Build Service The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). network low complexity opensuse CWE-20 critical	9.8