Vulnerabilities in Puppet Labs software