1. Cockpit-ws Security Flaw: Hostnames Starting with '-' Could Bypass CLI Safeguards
A long-standing, unaddressed vulnerability in the `cockpit-ws` component allows hostnames beginning with a hyphen (`-`) to be incorrectly interpreted as command-line options, potentially bypassing intended security boundaries. This flaw exposes the authentication commands (`cockpit-session`, `cockpit-ssh`, `cockpit.bei...