Security vulnerability affects the grub package. If certificates that signed grub are installed into db, grub can be booted directly.
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-RF43952.json"