Search for packages
| purl | pkg:pypi/cobbler@2.6.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-797
Aliases: CVE-2014-3225 GHSA-xc7w-jvhx-p6q9 |
Cobbler Path Traversal vulnerability Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated … | There are no reported fixed by versions. |
|
PYSEC-2026-313
Aliases: CVE-2018-10931 GHSA-8787-63px-3m23 |
Cobbler has Exposed Dangerous Method or Function It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-2026-624
|
Cobbler Web Interface Lacks CSRF Protection cobbler: Web interface lacks CSRF protection when using Django framework |
CVE-2011-4952
GHSA-9fqr-pqc9-f7pj |
|
PYSEC-2026-793
|
Cobbler vulnerable to code injection via unsafe YAML loading The `set_mgmt_parameters` function in item.py in cobbler before 2.2.2 allows context-dependent … |
CVE-2011-4953
GHSA-hpj3-5p46-g87w |
|
PYSEC-2026-792
|
Cobbler subject to Command Injection A Command Injection in action_power.py in Cobbler prior to v2.6.0 allows remote attackers to execute … |
CVE-2012-2395
GHSA-g34c-mg6m-xvxj |