metal3-io baremetal-operator

• CVE-2025-29781 Medium 6.5 Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD 0.2%
• CVE-2024-43803 Medium 4.9 BMO can expose particularly named secrets from other namespaces via BMH CRD 0.6%
• CVE-2023-30841 Medium 6.0 Ironic and ironic-inspector deployed within Baremetal Operator may expose as ConfigMaps 0.2%