pulpcore@3.13.0 vulnerabilities

Pulp Django Application and Related Modules

Direct Vulnerabilities

Known vulnerabilities in the pulpcore package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Race Condition

pulpcore is a Pulp Django Application and Related Modules

Affected versions of this package are vulnerable to Race Condition when creating the same content in multiple processes.

How to fix Race Condition?

Upgrade pulpcore to version 3.23.4 or higher.

[,3.23.4)
  • H
Race Condition

pulpcore is a Pulp Django Application and Related Modules

Affected versions of this package are vulnerable to Race Condition such that a task could clean up reserved resources shared with another task.

How to fix Race Condition?

Upgrade pulpcore to version 3.14.0 or higher.

[,3.14.0)
  • M
Insecure Encryption

pulpcore is a Pulp Django Application and Related Modules

Affected versions of this package are vulnerable to Insecure Encryption. Pulpcore uses insecure hash function blake2s for calculating 64-bit lock identifier from uuid.

How to fix Insecure Encryption?

Upgrade pulpcore to version 3.15.0 or higher.

[,3.15.0)