We take security issues seriously and welcome responsible disclosure of security vulnerabilities in Pulp. Please email pulp-security@redhat.com (a private address for the Pulp Security Team) with all reports.
Your report should include:
A member of the Pulp Security Team will confirm the vulnerability, determine its impact, and develop a fix.