[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-12701":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":40,"aliases":41,"duplicate_of":9,"upstream":42,"downstream":43,"duplicates":56,"related":57,"reserved_at":9,"published_at":58,"modified_at":59,"state":60,"summary":61,"references_raw":70,"kevs":116,"epss":117,"epss_history":120,"metrics":303,"affected":311},"CVE-2026-12701","A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with \"/\" but fails to block directory traversal sequences such as \"../\" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., \"looking/normal/../../../../etc/shadow\") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-22","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","weakness","Stable","Base","High",[20,24,28,32,36],{"id":21,"name":22,"techniques":23},"CAPEC-126","Path Traversal",[],{"id":25,"name":26,"techniques":27},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":29,"name":30,"techniques":31},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":33,"name":34,"techniques":35},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":37,"name":38,"techniques":39},"CAPEC-79","Using Slashes in Alternate Encoding",[],[],[],[],[44,46,48,50,52,54],{"_key":45},"RHSA-2026:42078",{"_key":47},"RHSA-2026:42079",{"_key":49},"RHSA-2026:42082",{"_key":51},"RHSA-2026:42150",{"_key":53},"RHSA-2026:42151",{"_key":55},"RHSA-2026:42240",[],[],"2026-07-20T14:18:18.318Z","2026-07-22T18:13:49.559Z","Awaiting Analysis",{"cisa_kev":62,"cisa_ransomware":62,"cisa_vendor":9,"epss_severity":63,"epss_score":64,"severity":65,"severity_score":66,"severity_version":67,"severity_source":68,"severity_vector":69,"severity_status":60},false,"low",0.01194,"critical",9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H",[71,78,83,88,92,96,100,104,108,112],{"url":72,"sources":73,"tags":75},"https://access.redhat.com/security/cve/CVE-2026-12701",[68,74],"nvd",[76,77],"VDB Entry","X Refsource REDHAT",{"url":79,"sources":80,"tags":81},"https://bugzilla.redhat.com/show_bug.cgi?id=2490703",[68,74],[82,77],"Issue Tracking",{"url":84,"sources":85,"tags":86},"https://access.redhat.com/errata/RHSA-2026:42150",[68,74],[87,77],"Vendor Advisory",{"url":89,"sources":90,"tags":91},"https://access.redhat.com/errata/RHSA-2026:42078",[68,74],[87,77],{"url":93,"sources":94,"tags":95},"https://access.redhat.com/errata/RHSA-2026:42079",[68,74],[87,77],{"url":97,"sources":98,"tags":99},"https://access.redhat.com/errata/RHSA-2026:42082",[68,74],[87,77],{"url":101,"sources":102,"tags":103},"https://access.redhat.com/errata/RHSA-2026:42151",[68,74],[87,77],{"url":105,"sources":106,"tags":107},"https://access.redhat.com/errata/RHSA-2026:42240",[68,74],[87,77],{"url":109,"sources":110,"tags":111},"https://access.redhat.com/errata/RHSA-2026:42132",[68,74],[87,77],{"url":113,"sources":114,"tags":115},"https://access.redhat.com/errata/RHSA-2026:42142",[68,74],[87,77],[],{"date":118,"score":64,"percentile":119},"2026-09-19",0.66637,[121,125,128,131,134,137,140,143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302],{"date":122,"score":123,"percentile":124},"2026-07-21",0.00759,0.51197,{"date":126,"score":123,"percentile":127},"2026-07-22",0.51383,{"date":129,"score":123,"percentile":130},"2026-07-23",0.51403,{"date":132,"score":123,"percentile":133},"2026-07-24",0.51407,{"date":135,"score":123,"percentile":136},"2026-07-25",0.5145,{"date":138,"score":123,"percentile":139},"2026-07-26",0.51448,{"date":141,"score":123,"percentile":142},"2026-07-27",0.51444,{"date":144,"score":123,"percentile":145},"2026-07-28",0.51495,{"date":147,"score":123,"percentile":148},"2026-07-29",0.51528,{"date":150,"score":123,"percentile":151},"2026-07-30",0.51604,{"date":153,"score":123,"percentile":154},"2026-07-31",0.51635,{"date":156,"score":123,"percentile":157},"2026-08-01",0.51644,{"date":159,"score":123,"percentile":160},"2026-08-02",0.5165,{"date":162,"score":123,"percentile":163},"2026-08-03",0.51664,{"date":165,"score":123,"percentile":166},"2026-08-04",0.51682,{"date":168,"score":123,"percentile":169},"2026-08-05",0.51713,{"date":171,"score":123,"percentile":172},"2026-08-06",0.5175,{"date":174,"score":123,"percentile":175},"2026-08-07",0.51801,{"date":177,"score":123,"percentile":178},"2026-08-08",0.51811,{"date":180,"score":123,"percentile":181},"2026-08-09",0.51799,{"date":183,"score":123,"percentile":184},"2026-08-10",0.51809,{"date":186,"score":123,"percentile":187},"2026-08-11",0.51887,{"date":189,"score":123,"percentile":190},"2026-08-12",0.51979,{"date":192,"score":123,"percentile":193},"2026-08-13",0.52007,{"date":195,"score":123,"percentile":196},"2026-08-14",0.52077,{"date":198,"score":123,"percentile":199},"2026-08-15",0.5218,{"date":201,"score":123,"percentile":202},"2026-08-16",0.52202,{"date":204,"score":123,"percentile":205},"2026-08-17",0.52197,{"date":207,"score":123,"percentile":208},"2026-08-18",0.52222,{"date":210,"score":123,"percentile":211},"2026-08-19",0.524,{"date":213,"score":123,"percentile":214},"2026-08-20",0.52458,{"date":216,"score":123,"percentile":217},"2026-08-21",0.52506,{"date":219,"score":123,"percentile":220},"2026-08-22",0.52522,{"date":222,"score":123,"percentile":223},"2026-08-23",0.52092,{"date":225,"score":64,"percentile":226},"2026-08-24",0.6564,{"date":228,"score":64,"percentile":229},"2026-08-25",0.65659,{"date":231,"score":64,"percentile":232},"2026-08-26",0.65722,{"date":234,"score":64,"percentile":235},"2026-08-27",0.65755,{"date":237,"score":64,"percentile":238},"2026-08-28",0.65329,{"date":240,"score":64,"percentile":241},"2026-08-29",0.65353,{"date":243,"score":64,"percentile":244},"2026-08-30",0.6582,{"date":246,"score":64,"percentile":247},"2026-08-31",0.65826,{"date":249,"score":64,"percentile":250},"2026-09-01",0.65848,{"date":252,"score":64,"percentile":253},"2026-09-02",0.65885,{"date":255,"score":64,"percentile":256},"2026-09-03",0.65907,{"date":258,"score":64,"percentile":259},"2026-09-04",0.65927,{"date":261,"score":64,"percentile":262},"2026-09-05",0.65506,{"date":264,"score":64,"percentile":265},"2026-09-06",0.65971,{"date":267,"score":64,"percentile":268},"2026-09-07",0.65975,{"date":270,"score":64,"percentile":271},"2026-09-08",0.65988,{"date":273,"score":64,"percentile":274},"2026-09-09",0.6615,{"date":276,"score":64,"percentile":277},"2026-09-10",0.66174,{"date":279,"score":64,"percentile":280},"2026-09-11",0.66201,{"date":282,"score":64,"percentile":283},"2026-09-12",0.66256,{"date":285,"score":64,"percentile":286},"2026-09-13",0.66253,{"date":288,"score":64,"percentile":289},"2026-09-14",0.66273,{"date":291,"score":64,"percentile":292},"2026-09-15",0.66334,{"date":294,"score":64,"percentile":295},"2026-09-16",0.6645,{"date":297,"score":64,"percentile":298},"2026-09-17",0.66512,{"date":300,"score":64,"percentile":301},"2026-09-18",0.66602,{"date":118,"score":64,"percentile":119},[304,309],{"source":68,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":305,"cvss_v4_0":9},{"baseScore":66,"baseSeverity":306,"vectorString":69,"impactScore":307,"exploitabilityScore":308},"CRITICAL",10,5.9,{"source":74,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":310,"cvss_v4_0":9},{"baseScore":66,"baseSeverity":306,"vectorString":69,"impactScore":307,"exploitabilityScore":308},[]]