← All credits

Red Hat would like to thank Martin Brodeur (Independent security researcher) for reporting this issue.

3 vulnerability records and advisories credit this contributor.

Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

Instructlab: instructlab: path traversal allows arbitrary directory creation and file write

Instructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true`