CVEs affecting projects tracked on Release Alert, from NVD & OSV.
Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.