https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 09:37:36 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-111456 <p>A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registration module in the Candlepin package. The registration method checks permission to create a consumer only when the caller is a user. A consumer that authenticates with its identity certificate does not go through that check. A low-privileged network attacker or user who has a valid consumer certificate for one organization can register a new consumer in a different organization by supplying that organization&#39;s key. The response includes an identity certificate for the new consumer. With that certificate, the attacker can view the target organization&#39;s subscription pools. When the organization is not using simple content access, the attacker can attach that organization&#39;s entitlements to the new consumer.</p> <p>A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registration module in the Candlepin package. The registration method checks permission to create a consumer only when the caller is a user. A consumer that authenticates with its identity certificate does not go through that check. A low-privileged network attacker or user who has a valid consumer certificate for one organization can register a new consumer in a different organization by supplying that organization&#39;s key. The response includes an identity certificate for the new consumer. With that certificate, the attacker can view the target organization&#39;s subscription pools. When the organization is not using simple content access, the attacker can attach that organization&#39;s entitlements to the new consumer.</p> https://db.gcve.eu/vuln/fkie_cve-2026-111456 https://db.gcve.eu/vuln/ghsa-jff5-xmhg-5fjr <p>A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registration module in the Candlepin package. The registration method checks permission to create a consumer only when the caller is a user. A consumer that authenticates with its identity certificate does not go through that check. A low-privileged network attacker or user who has a valid consumer certificate for one organization can register a new consumer in a different organization by supplying that organization&#39;s key. The response includes an identity certificate for the new consumer. With that certificate, the attacker can view the target organization&#39;s subscription pools. When the organization is not using simple content access, the attacker can attach that organization&#39;s entitlements to the new consumer.</p> <p>A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registration module in the Candlepin package. The registration method checks permission to create a consumer only when the caller is a user. A consumer that authenticates with its identity certificate does not go through that check. A low-privileged network attacker or user who has a valid consumer certificate for one organization can register a new consumer in a different organization by supplying that organization&#39;s key. The response includes an identity certificate for the new consumer. With that certificate, the attacker can view the target organization&#39;s subscription pools. When the organization is not using simple content access, the attacker can attach that organization&#39;s entitlements to the new consumer.</p> https://db.gcve.eu/vuln/ghsa-jff5-xmhg-5fjr https://db.gcve.eu/vuln/rhsa-2026:99949 <p>sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion crass: crass: Denial of Service via crafted scientific notation in CSS crass: crass: Denial of Service via excessive recursion when processing comments puma: Puma: HTTP Request Smuggling via Underscore Header Name Confusion foreman: Cross-tenant disclosure of template revisions via unauthorized audit lookup rubygem-katello: Cross-tenant Content View Filter rule access and modification via unauthorized parent filter lookup foreman: authorization flaw in the Foreman::Controller::UserAware#find_user handling used by Api::V2::PersonalAccessTokensController foreman: authorization flaw in the mail-notification endpoints implemented by Api::V2::MailNotificationsController foreman: authorization flaw in the Foreman::Controller::UserAware handling used by Api::V2::SshKeysController pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and Pulp Container registry signing key theft pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects pyjwt: PyJWT: Authentication bypass via improper public key validation pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets pulp-rpm: Distribution tree publish creates directories from .treeinfo ids candlepin: candlepin: broken object-level authorization via VerifyAuthorizationFilter…</p> <p>sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion crass: crass: Denial of Service via crafted scientific notation in CSS crass: crass: Denial of Service via excessive recursion when processing comments puma: Puma: HTTP Request Smuggling via Underscore Header Name Confusion foreman: Cross-tenant disclosure of template revisions via unauthorized audit lookup rubygem-katello: Cross-tenant Content View Filter rule access and modification via unauthorized parent filter lookup foreman: authorization flaw in the Foreman::Controller::UserAware#find_user handling used by Api::V2::PersonalAccessTokensController foreman: authorization flaw in the mail-notification endpoints implemented by Api::V2::MailNotificationsController foreman: authorization flaw in the Foreman::Controller::UserAware handling used by Api::V2::SshKeysController pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and Pulp Container registry signing key theft pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects pyjwt: PyJWT: Authentication bypass via improper public key validation pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets pulp-rpm: Distribution tree publish creates directories from .treeinfo ids candlepin: candlepin: broken object-level authorization via VerifyAuthorizationFilter…</p> https://db.gcve.eu/vuln/rhsa-2026:99949