redhat/python-pulp-rpm vulnerabilities

Latest redhat/python-pulp-rpm CVEs

Newest publication first

1. CVE-2026-103870 Pulp-rpm: distribution tree publish creates directories from .treeinfo ids

   Published 2026-10-07

   Medium·CVSS 5.0 EPSS 0.23%

   A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's reposito...

2. CVE-2026-1961 Forman: foreman: remote code execution via command injection in websocket proxy

   Published 2026-03-26

   High·CVSS 8.8 EPSS 2.0%

   A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell comma...

3. CVE-2026-4324 Rubygem-katello: katello: denial of service and potential information disclosure via sql injection

   Published 2026-03-17

   Medium·CVSS 5.4 EPSS 0.30%

   A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lea...

4. CVE-2025-68121 Unexpected session resumption in crypto/tls

   Published 2026-02-05

   Critical·CVSS 10.0 EPSS 0.90%

   During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and...

5. CVE-2025-14550 Potential denial-of-service vulnerability via repeated headers when using ASGI

   Published 2026-02-03

   High·CVSS 7.5 EPSS 1.1%

   An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. ASGIRequest allows a remote attacker to cause a potential denial-of-service via a crafted request with multiple duplicate headers. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and...

6. CVE-2026-1312 Potential SQL injection via QuerySet.order_by and FilteredRelation

   Published 2026-02-03

   High·CVSS 8.5 EPSS 0.90%

   An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. .QuerySet.order_by() is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRel...

7. CVE-2026-1287 Potential SQL injection in column aliases via control characters

   Published 2026-02-03

   High·CVSS 8.3 EPSS 0.84%

   An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. FilteredRelation is subject to SQL injection in column aliases via control characters, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to QuerySet methods...

8. CVE-2026-1285 Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods

   Published 2026-02-03

   High·CVSS 7.5 EPSS 1.1%

   An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. django.utils.text.Truncator.chars() and Truncator.words() methods (with html=True) and the truncatechars_html and truncatewords_html template filters allow a remote attacker to cause a potentia...

9. CVE-2026-1207 Potential SQL injection via raster lookups on PostGIS

   Published 2026-02-03

   High·CVSS 8.3 EPSS 12.8%

   An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on RasterField (only implemented on PostGIS) allows remote attackers to inject SQL via the band index parameter. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2...

10. CVE-2026-1530 Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation

    Published 2026-02-02

    High·CVSS 8.1 EPSS 0.27% PoC

    A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift...

11. CVE-2026-1531 Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification

    Published 2026-02-02

    High·CVSS 8.1 EPSS 0.29% PoC

    A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic betw...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.