Vulnerabilities of Red Hat Red Hat Update Infrastructure 4 for Cloud Providers

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-103870	A flaw was found in pulp-rpm when it publishes a distribution tree	5.0 Medium	Oct 7, 2026
CVE-2026-103868	A flaw was found in pulp-container when it authenticates to an upstream registry	6.5 Medium	Oct 7, 2026
CVE-2026-90959	A path traversal vulnerability was found in pulpcore	8.1 High	Sep 24, 2026
CVE-2026-84232	Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content	5.4 Medium	Sep 1, 2026
CVE-2026-82327	Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	5.5 Medium	Aug 28, 2026
CVE-2026-12701	A path traversal vulnerability was found in pulpcore	9.0 Critical	Jul 20, 2026
CVE-2026-48863	Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service	7.5 High	Jul 16, 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Medium	Jun 2, 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 High	May 28, 2026
CVE-2026-48864	A flaw was found in libsolv	7.8 High	May 26, 2026
CVE-2026-9149	Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file	6.5 Medium	May 20, 2026
CVE-2026-9150	Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums	6.5 Medium	May 20, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-27459	pyOpenSSL is a Python wrapper around the OpenSSL library	7.2 High	Mar 17, 2026
CVE-2026-1312	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1287	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1207	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2024-7923	An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to…	9.8 Critical	Sep 4, 2024
CVE-2024-7143	A flaw was found in the Pulp package	6.7 Medium	Aug 7, 2024
CVE-2023-50782	A flaw was found in the python-cryptography package	7.5 High	Feb 5, 2024
CVE-2023-50781	A flaw was found in m2crypto	7.5 High	Feb 5, 2024

Other Red Hat products