← All credits

Red Hat would like to thank Yonghwa Lee (Xint by Theori) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

CVE-2026-105302
Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens
CVE-2026-90959
Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft