Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pulpcore@2.16
purl pkg:pypi/pulpcore@2.16
Tags Ghost
Next non-vulnerable version 3.56.1
Latest non-vulnerable version 3.56.1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-wucb-ckae-97aq
Aliases:
CVE-2018-10917
GHSA-574p-6fw4-4hw8
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:30:03.373841+00:00 GHSA Importer Affected by VCID-wucb-ckae-97aq https://github.com/advisories/GHSA-574p-6fw4-4hw8 38.1.0
2026-04-01T12:50:18.378899+00:00 GitLab Importer Affected by VCID-wucb-ckae-97aq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/pulpcore/CVE-2018-10917.yml 38.0.0