Redhat Pagure vulnerabilities

• redhat pagure Pagure: path traversal in view_issue_raw_file() CVE-2024-4982 Fix available 7.6 HighMay 12, 2025
• redhat pagure Pagure: _update_file_in_git() follows symbolic links in temporary clones CVE-2024-4981 Fix available 7.6 HighMay 12, 2025
• redhat pagure, opensuse backports sle, leap +2 more Pagure before 5.6 allows XSS via the templates/blame.html blame view. CVE-2019-11556 Fix available 6.1 MediumSeptember 25, 2020
• redhat pagure, fedoraproject fedora, redhat enterprise linux +2 more Pagure: XSS possible in file attachment endpoint CVE-2016-1000037 6.1 MediumNovember 6, 2019
• redhat pagure Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS... CVE-2019-7628 Fix available 5.9 MediumFebruary 8, 2019
• pagure project pagure Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization CVE-2017-1002151 7.5 HighSeptember 14, 2017
• redhat pagure Pagure 2.2.1 XSS in raw file endpoint CVE-2016-1000007 6.1 MediumOctober 7, 2016