python-pulpcore-client vulnerabilities
CVEs whose affected-version data names the python-pulpcore-client package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-90959High· 8.1A path traversal vulnerability was found in pulpcore
A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme valida…
▾ TwilightRed Hat · ansible-automation-platform-24/hub-rhel8EPSS 0.41%via NVD
CVE-2026-12701Critical· 9.0Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An aut…
▾ MidnightRed Hat · python3.12-pulpcoreEPSS 1.2%via CVEORG