redhat/python3x-pulp-container vulnerabilities

Latest redhat/python3x-pulp-container CVEs

Newest publication first

1. CVE-2026-103868 Pulp-container: registry credentials are reused across remotes in a worker

   Published 2026-10-07

   Medium·CVSS 6.5

   A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A user who can sync a container remote, and can point that remote at a server they control, receives t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.