Supply Chain Vulnerabilities found and fixed in Fedora's Pagure and openSUSE's Open Build Service - eviltoast