redhat/rubygem-smart_proxy_dynflow vulnerabilities

Latest redhat/rubygem-smart_proxy_dynflow CVEs

Newest publication first

1. CVE-2026-107151 Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests

   Published 2026-10-07

   Medium·CVSS 5.9

   Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.