- ipmi: a failed logout on close is logged at debug level instead of
passed over (B110); the session still times out on the BMC.
- ipmi: the pyghmi imports are this driver's protocol, the fallback for
BMCs without Redfish, documented as insecure in the module and in
docs/security.md (nosec B415).
- parsers.accounts: the empty password is NAPALM's get_users field;
Redfish never returns one (nosec B105).