CVE-2024-4981: Red Hat Pagure

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo.

Affected products

• Red Hat Pagure: before 5.14.1 (fixed in 5.14.1)

Published 2025-05-12. Last modified 2026-06-17.