Known Vulnerabilities for Pulp by Pulp Project
Listed below are 1 of the newest known vulnerabilities associated with "Pulp" by "Pulp Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-12701 json | A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths d... | Not Provided | 2026-07-20 | 2026-07-22 |
| CVE-2026-12398 json | A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the legacy role import API (v1) i... | Not Provided | 2026-06-16 | 2026-06-29 |
| CVE-2015-5153 json | Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of ... | 8.8 - HIGH | 2017-08-18 | 2017-08-24 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Pulp Project | Pulp | - |