Vulnerabilities in Puppet Enterprise Pipeline