python-pulpcore-client vulnerabilities

CVEs whose affected-version data names the python-pulpcore-client package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-90959High· 8.1

yesterday

A path traversal vulnerability was found in pulpcore

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme valida…

▾ TwilightRed Hat · ansible-automation-platform-24/hub-rhel8via NVD