Pulpcore

Latest version: v3.74.1

Safety actively analyzes 723177 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 77

3.57.1

REST API {: 3.57.1-rest-api }

Bugfixes {: 3.57.1-rest-api-bugfix }

- Fixed RBAC permissions being incorrectly assigned in tasks that create objects.
https://access.redhat.com/security/cve/cve-2024-7143
[5683](https://github.com/pulp/pulpcore/issues/5683)

Plugin API {: 3.57.1-plugin-api }

No significant changes.

Pulp File {: 3.57.1-pulp-file }

No significant changes.

Pulp Cert Guard {: 3.57.1-pulp-cert-guard }

No significant changes.

---

3.57.0

Not secure
REST API {: 3.57.0-rest-api }

Features {: 3.57.0-rest-api-feature }

- Added the ability to save task's diagnostics data as artifacts. These artifacts are available at the
task's detail endpoint. To download them, issue a GET request to `${TASK_HREF}profile_artifacts/`.
The artifacts are cleaned up automatically by the orphan cleanup.
[5422](https://github.com/pulp/pulpcore/issues/5422)
- Improved performance when handling tasks by deferred loading of encrypted args.
This also allows seeing and purging tasks in case the symmetric db key was lost.

Bugfixes {: 3.57.0-rest-api-bugfix }

- Implemented batching for artifact deletion to handle the reclaim space task for large repositories.
[5635](https://github.com/pulp/pulpcore/issues/5635)
- Fixed urlizing of api hrefs in clickable api.
[5664](https://github.com/pulp/pulpcore/issues/5664)

Improved Documentation {: 3.57.0-rest-api-doc }

- Updated REMOTE-USER header definition (to use hyphen, instead of underscore) due
to gunicorn version update blocking its usage for security purposes.
[5478](https://github.com/pulp/pulpcore/issues/5478)

Plugin API {: 3.57.0-plugin-api }

Bugfixes {: 3.57.0-plugin-api-bugfix }

- Change field name `url` to `file_url` on UploadSerializerFieldsMixin to avoid conflicting fields in
plugins.
[5633](https://github.com/pulp/pulpcore/issues/5633)

Pulp File {: 3.57.0-pulp-file }

No significant changes.

Pulp Cert Guard {: 3.57.0-pulp-cert-guard }

No significant changes.

---

3.56.1

REST API {: 3.56.1-rest-api }

No significant changes.

Plugin API {: 3.56.1-plugin-api }

Bugfixes {: 3.56.1-plugin-api-bugfix }

- Change field name `url` to `file_url` on UploadSerializerFieldsMixin to avoid conflicting fields in
plugins.
[5633](https://github.com/pulp/pulpcore/issues/5633)

Pulp File {: 3.56.1-pulp-file }

No significant changes.

Pulp Cert Guard {: 3.56.1-pulp-cert-guard }

No significant changes.

---

3.56.0

REST API {: 3.56.0-rest-api }

Features {: 3.56.0-rest-api-feature }

- Added kafka integration (tech-preview).
[5337](https://github.com/pulp/pulpcore/issues/5337)
- Added RBAC for `TaskGroups` API.
[5497](https://github.com/pulp/pulpcore/issues/5497)

Bugfixes {: 3.56.0-rest-api-bugfix }

- Fixed path title at content directory index to include domain's name when enabled.
[4253](https://github.com/pulp/pulpcore/issues/4253)
- Fixed content upload for existing on-demand content not properly storing the new artifact.
[5501](https://github.com/pulp/pulpcore/issues/5501)
- Fixed openapi command where plugins relied on CONTENT_ORIGIN to be set.
[5510](https://github.com/pulp/pulpcore/issues/5510)
- Added a note about the default value of the `SECRET_KEY` setting.
[5529](https://github.com/pulp/pulpcore/issues/5529)
- Browsable HREFs now have clickable links again.
[5563](https://github.com/pulp/pulpcore/issues/5563)
- Fixed a bug in `has_repo_or_repo_ver_param_model_or_obj_perms` function to make
it work with plugin Repositories.
[5619](https://github.com/pulp/pulpcore/issues/5619)

Plugin API {: 3.56.0-plugin-api }

Features {: 3.56.0-plugin-api-feature }

- Added new `url` field to UploadSerializerFieldsMixin that will download the file used for the content upload task.
[4608](https://github.com/pulp/pulpcore/issues/4608)

Pulp File {: 3.56.0-pulp-file }

No significant changes.

Pulp Cert Guard {: 3.56.0-pulp-cert-guard }

No significant changes.

---

3.55.3

REST API {: 3.55.3-rest-api }

Bugfixes {: 3.55.3-rest-api-bugfix }

- Fixed a bug in `has_repo_or_repo_ver_param_model_or_obj_perms` function to make
it work with plugin Repositories.
[5619](https://github.com/pulp/pulpcore/issues/5619)

Plugin API {: 3.55.3-plugin-api }

No significant changes.

Pulp File {: 3.55.3-pulp-file }

No significant changes.

Pulp Cert Guard {: 3.55.3-pulp-cert-guard }

No significant changes.

---

3.55.2

REST API {: 3.55.2-rest-api }

Bugfixes {: 3.55.2-rest-api-bugfix }

- Browsable HREFs now have clickable links again.
[5563](https://github.com/pulp/pulpcore/issues/5563)

Plugin API {: 3.55.2-plugin-api }

No significant changes.

Pulp File {: 3.55.2-pulp-file }

No significant changes.

Pulp Cert Guard {: 3.55.2-pulp-cert-guard }

No significant changes.

---

Page 8 of 77

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.