Koji through 1.17.0 allows remote Directory Traversal, with resulting Privilege Escalation.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2021-0147.json"