https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T11:32:57.132919+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-113372 CVE-2026-113372 — Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key 2026-11-07T11:32:57.134344+00:00

Affected: Sonatype Nexus Repository 3

Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadata as that repository.