pulpcore 3.54.1 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the pulpcore package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Improper Authentication pulpcore is a Pulp Django Application and Related Modules Affected versions of this package are vulnerable to Improper Authentication due to improper handling of HTTP headers by Apache's `mod_proxy` when deployed with Gunicorn versions prior to 22.0. An attacker can gain unauthorized administrative access by sending a malformed header. How to fix Improper Authentication? Upgrade `pulpcore` to version 3.81.0 or higher.	[,3.81.0)
H Improper Authorization pulpcore is a Pulp Django Application and Related Modules Affected versions of this package are vulnerable to Improper Authorization via the role-based access control (RBAC) permissions during object creation within a task. An attacker can manipulate the assignment of permissions by exploiting the method that incorrectly identifies the task initiator, leading to unauthorized access or control over created objects. How to fix Improper Authorization? Upgrade `pulpcore` to version 3.21.33, 3.22.30, 3.28.32, 3.39.20, 3.49.17, 3.57.1 or higher.	[,3.21.33)[3.22.0,3.22.30)[3.23.0,3.28.32)[3.29.0,3.39.20)[3.40.0,3.49.17)[3.50.0,3.57.1)

Vulnerability

Vulnerable Version

Improper Authentication

pulpcore is a Pulp Django Application and Related Modules

Affected versions of this package are vulnerable to Improper Authentication due to improper handling of HTTP headers by Apache's mod_proxy when deployed with Gunicorn versions prior to 22.0. An attacker can gain unauthorized administrative access by sending a malformed header.

How to fix Improper Authentication?

Upgrade pulpcore to version 3.81.0 or higher.

[,3.81.0)

Improper Authorization

pulpcore is a Pulp Django Application and Related Modules

Affected versions of this package are vulnerable to Improper Authorization via the role-based access control (RBAC) permissions during object creation within a task. An attacker can manipulate the assignment of permissions by exploiting the method that incorrectly identifies the task initiator, leading to unauthorized access or control over created objects.

How to fix Improper Authorization?

Upgrade pulpcore to version 3.21.33, 3.22.30, 3.28.32, 3.39.20, 3.49.17, 3.57.1 or higher.

[,3.21.33)[3.22.0,3.22.30)[3.23.0,3.28.32)[3.29.0,3.39.20)[3.40.0,3.49.17)[3.50.0,3.57.1)

pulpcore@3.54.1 vulnerabilities

Pulp Django Application and Related Modules

latest version

latest non vulnerable version

first published

latest version published

licenses detected

Direct Vulnerabilities

Fix vulnerabilities automatically