CVEs related to bugs in glance_store