pulpcore-obsolete-packages vulnerabilities (Red Hat)
50 vulnerabilities.
-
pulpcore-obsolete-packagesRed Hat Rubygem-katello: improper authorization logic allows resource enumeration 4.3 Medium -
pulpcore-obsolete-packagesRed Hat Rubygem-katello: sql injection in registry proxy via labels 6.5 Medium -
pulpcore-obsolete-packagesRed Hat Rubygem-hammer_cli: command injection via insecure editor invocation 6.7 Medium -
pulpcore-obsolete-packagesRed Hat Foreman: command injection in foreman-tail 5.3 Medium -
pulpcore-obsolete-packagesRed Hat Foreman: excessive permissions for viewer role on preview 9.1 Critical -
pulpcore-obsolete-packagesRed Hat Foreman: foreman: arbitrary code execution via safemode sandbox bypass 8.8 High -
pulpcore-obsolete-packagesRed Hat Foreman: ssti and insecure deserialization in foreman-rake configuration 7.7 High -
pulpcore-obsolete-packagesRed Hat Foreman: command injection in foreman-rake database tasks 8.2 High -
pulpcore-obsolete-packagesRed Hat Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter 8.2 High -
pulpcore-obsolete-packagesRed Hat Foreman: unauthenticated information disclosure via provisioning token validation flaw 7.5 High -
pulpcore-obsolete-packagesRed Hat Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter 8.8 High -
pulpcore-obsolete-packagesRed Hat GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation 8.7 High -
pulpcore-obsolete-packagesRed Hat Ketello: katello content view history api cross-organization authorization bypass 4.3 Medium -
pulpcore-obsolete-packagesRed Hat GitPython before 3.1.59 Arbitrary File Read via TagReference.create 7.1 High -
pulpcore-obsolete-packagesRed Hat sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger 8.7 High -
pulpcore-obsolete-packagesRed Hat sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service) 7.5 High -
pulpcore-obsolete-packagesRed Hat sqlparse: Quadratic O(n²) DoS in group_comments 8.7 High -
pulpcore-obsolete-packagesRed Hat Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
pulpcore-obsolete-packagesRed Hat Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
pulpcore-obsolete-packagesRed Hat Fix Javascript regexp context tracking in html/template 6.1 Medium -
pulpcore-obsolete-packagesRed Hat Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
pulpcore-obsolete-packagesRed Hat Enforce maximum recursion depth in encoding/asn1 7.5 High -
pulpcore-obsolete-packagesRed Hat AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) 7.1 High -
pulpcore-obsolete-packagesRed Hat jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq) 8.7 High -
pulpcore-obsolete-packagesRed Hat Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) 7.8 High -
pulpcore-obsolete-packagesRed Hat Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections 6.9 Medium -
pulpcore-obsolete-packagesRed Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
pulpcore-obsolete-packagesRed Hat Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 High -
pulpcore-obsolete-packagesRed Hat Quadratic complexity in WordDecoder.DecodeHeader in mime 7.5 High -
pulpcore-obsolete-packagesRed Hat AIOHTTP Vulnerable to Deserialization of Untrusted Data 6.4 Medium -
pulpcore-obsolete-packagesRed Hat `jwt` (Ruby gem) - empty-key HMAC bypass 9.1 Critical -
pulpcore-obsolete-packagesRed Hat GitPython: Command injection via Git options bypass 8.8 High -
pulpcore-obsolete-packagesRed Hat GitPython: Unsafe option check validates multi_options before shlex.split transforms it 8.1 High -
pulpcore-obsolete-packagesRed Hat dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver 7.5 High -
pulpcore-obsolete-packagesRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
pulpcore-obsolete-packagesRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
pulpcore-obsolete-packagesRed Hat Memory leak 7.2 High -
pulpcore-obsolete-packagesRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
pulpcore-obsolete-packagesRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
pulpcore-obsolete-packagesRed Hat Django SQL injection vulnerability 7.3 High -
pulpcore-obsolete-packagesRed Hat HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
pulpcore-obsolete-packagesRed Hat Django vulnerable to Denial of Service 7.5 High -
pulpcore-obsolete-packagesRed Hat Django Path Traversal vulnerability 4.3 Medium -
pulpcore-obsolete-packagesRed Hat Django vulnerable to user enumeration attack 5.3 Medium -
pulpcore-obsolete-packagesRed Hat Django vulnerable to Denial of Service 7.5 High -
pulpcore-obsolete-packagesRed Hat Denial of Service via crafted zip file in jaraco/zipp 6.2 Medium -
pulpcore-obsolete-packagesRed Hat Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
pulpcore-obsolete-packagesRed Hat Regular Expression Denial of Service in micromatch 5.3 Medium -
pulpcore-obsolete-packagesRed Hat node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
pulpcore-obsolete-packagesRed Hat AIOHTTP: HTTP request smuggling via WebSocket upgrade 6.3 Medium