4.1.0

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-18	CVE-2021-27023	A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. network low complexity puppet fedoraproject critical	9.8
2021-11-18	CVE-2021-27025	A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'. network low complexity puppet fedoraproject	6.5