Threats tagged 'ghsa-j6jf-w58v-gphw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-113372Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that High7.12026-11-04GCVE DatabaseCVE-2026-113372 Sonatype Nexus Repository 3 has a vulnerability where an account with only read privileges on a YUM proxy or group repository can obtain the private signing key of that repository. This key allows the holder to sign repository metadata, potentially compromising repository integrity. The vulnerability does not require edit privileges, only read access. Report on CVE-2026-113372 Vulnerability CWE-522 #ghsa-j6jf-w58v-gphw	GCVE Database	2026-11-04

Page 1 of 1