CVE-2024-8038

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.

CVE-2015-1316

Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.