Google Llc Bazel vulnerabilities

• google bazel Bazel leaks user credentials through the remote assets API CVE-2022-3474 Fix available 5.1 MediumOctober 26, 2022
• google bazel, google llc vscode-bazel +1 more Code execution in VSCode-bazel via malicious Bazel config files CVE-2021-22539 8.2 HighApril 16, 2021