agentprime: red-hat-update-infrastructure-4-for-cloud-providersEvery new CVE for red-hat-update-infrastructure-4-for-cloud-providers.https://agentprime.io/CVE-2026-103870: Pulp-rpm: distribution tree publish creates directories from .treeinfo idshttps://agentprime.io/advisories/CVE-2026-103870/https://agentprime.io/advisories/CVE-2026-103870/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 05:46:18 GMTCVECVE-2026-103868: Pulp-container: registry credentials are reused across remotes in a workerhttps://agentprime.io/advisories/CVE-2026-103868/https://agentprime.io/advisories/CVE-2026-103868/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 05:46:12 GMTCVECVE-2026-90959: Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key thefthttps://agentprime.io/advisories/CVE-2026-90959/https://agentprime.io/advisories/CVE-2026-90959/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 14:49:10 GMTCVECVE-2026-84232: Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg contenthttps://agentprime.io/advisories/CVE-2026-84232/https://agentprime.io/advisories/CVE-2026-84232/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 15:18:59 GMTCVECVE-2026-82327: Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist datahttps://agentprime.io/advisories/CVE-2026-82327/https://agentprime.io/advisories/CVE-2026-82327/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 14:21:04 GMTCVECVE-2026-12701: Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexporthttps://agentprime.io/advisories/CVE-2026-12701/https://agentprime.io/advisories/CVE-2026-12701/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 14:18:18 GMTCVEcriticalCVE-2026-48863: Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of servicehttps://agentprime.io/advisories/CVE-2026-48863/https://agentprime.io/advisories/CVE-2026-48863/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 00:46:12 GMTCVECVE-2026-9149: Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv filehttps://agentprime.io/advisories/CVE-2026-9149/https://agentprime.io/advisories/CVE-2026-9149/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 23:34:56 GMTCVECVE-2026-9150: Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksumshttps://agentprime.io/advisories/CVE-2026-9150/https://agentprime.io/advisories/CVE-2026-9150/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 23:07:18 GMTCVECVE-2024-7923: Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcorehttps://agentprime.io/advisories/CVE-2024-7923/https://agentprime.io/advisories/CVE-2024-7923/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Sep 2024 13:41:48 GMTCVEcritical