← All credits

Red Hat would like to thank gwolfs (Independent Security Researcher) for reporting this issue.

3 vulnerability records and advisories credit this contributor.

CVE-2026-103870

Pulp-rpm: distribution tree publish creates directories from .treeinfo ids

CVE-2026-103869

Pulp-ansible: bearer tokens are reused across remotes in a worker

CVE-2026-103868

Pulp-container: registry credentials are reused across remotes in a worker