Bugzilla – Dependency tree for Bug 1122675
VUL-0: CVE-2019-3681: osc: stores downloaded (supposed) RPM in network-controlled filesystem paths