CVEs affecting projects tracked on Release Alert, from NVD & OSV.
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.