High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-03	CVE-2023-5255	Improper Resource Shutdown or Release vulnerability in Puppet and Puppet Server For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked. network low complexity puppet CWE-404	7.5
2020-03-11	CVE-2020-7943	Unspecified vulnerability in Puppet Server Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. network low complexity puppet	7.5