python-pulp-rpm vulnerabilities

CVEs whose affected-version data names the python-pulp-rpm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103870Medium· 5.0

today

A flaw was found in pulp-rpm when it publishes a distribution tree

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the ta…

▾ SunlitRed Hat · python3.12-pulp-rpmvia NVD