CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /.