Most critical of the bugs allowed attackers to root federated instances.