python-pulp-rpm vulnerabilities
CVEs whose affected-version data names the python-pulp-rpm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-103870Medium· 5.0A flaw was found in pulp-rpm when it publishes a distribution tree
A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the ta…
▾ SunlitRed Hat · python3.12-pulp-rpmEPSS 0.23%via NVD
CVE-2026-1961High· 8.0PoCA flaw was found in Foreman
A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resou…
▾ MidnightRed Hat · foremanEPSS 1.9%via NVD