CVE Catalog
CVE-2026-70547
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.20%
11th percentile - higher than 11% of all known CVEs
Summary
An authenticated user without repository read permission may access package metadata under specific conditions.
Risk Assessment
This could lead to unauthorized disclosure of package information, potentially compromising data confidentiality.
Recommendation
Update the software to a patched version and review repository access permission configurations.
Original NVD description (English source)
An authenticated user without repository read permission may access package metadata under specific conditions.