Red Hat Update Infrastructure 4 For Cloud Providers

Vulnerabilities related to Red Hat Update Infrastructure 4 For Cloud Providers 9

• Medium 6.5 An **expression language injection** has been found in the HeaderContentGuard.permit function in... An expression language injection has been found in the HeaderContentGuard.permit function in... CVE-2026-123084 Nov 11, 07:12
• Medium 5.0 Path Traversal in pulp-rpm CVE-2026-103870 Oct 7, 15:33
• High 8.1 A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url'... Path traversal reported (CVE-2026-90959). Confidential information can be exposed externally. CVE-2026-90959 Sep 25, 00:17
• Medium 5.4 Cross-Site Scripting (XSS) in pulpcore's content serving application Cross-site scripting in pulpcore's content serving application (CVE-2026-84232). Risk of unauthorized operations or information disclosure. CVE-2026-84232 Sep 2, 01:17
• Medium 5.5 Vulnerability in libsolv CVE-2026-82327 Aug 29, 01:18
• Critical 9.0 A path traversal vulnerability was found in pulpcore. The relative_path_validator function only... Path traversal reported (CVE-2026-12701). Data can be tampered with by attackers. CVE-2026-12701 Jul 21, 00:32
• High 7.5 Vulnerability in libsolv CVE-2026-48863 Jul 16, 10:16
• Medium 6.5 Vulnerability in libsolv CVE-2026-9150 May 21, 09:30
• Medium 6.5 Vulnerability in libsolv CVE-2026-9149 May 21, 09:30