Skip to content

Product

redhat/python3.12-pulp-ansible vulnerabilities

2 published CVES affecting redhat/python3.12-pulp-ansible, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest redhat/python3.12-pulp-ansible CVEs

Newest publication first

  1. CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode

    Published
    CriticalCVSS 9.2 EPSS 0.95%

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit...

  2. CVE-2026-103869 Pulp-ansible: bearer tokens are reused across remotes in a worker

    Published
    MediumCVSS 6.5 EPSS 0.23%

    A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that worker. A user who can sync an Ansible remote that uses token refresh, and can point that remote at a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.