VYPR

pulpcore

by Red Hat

CVEs (1)

  • CVE-2026-12701CriJul 20, 2026
    risk 0.59cvss 9.0epss 0.01

    A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a…