java-21-amazon-corretto

Direct Vulnerabilities

Known vulnerabilities in the java-21-amazon-corretto package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Improper Certificate Validation

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:21.0.13.0.11-1.amzn2023.1
  • H
Incorrect Implementation of Authentication Algorithm

<1:21.0.13.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:21.0.13.0.10-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:21.0.13.0.10-1.amzn2023.1
  • H
CRLF Injection

<1:21.0.13.0.10-1.amzn2023.1
  • H
XML Injection

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Validation of Integrity Check Value

<1:21.0.13.0.10-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<1:21.0.13.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:21.0.13.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:21.0.13.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:21.0.13.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:21.0.13.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:21.0.13.0.10-1.amzn2023.1
  • H
Information Exposure Through Caching

<1:21.0.13.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:21.0.13.0.10-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Validation of Syntactic Correctness of Input

<1:21.0.13.0.10-1.amzn2023.1
  • H
Insufficient Compartmentalization

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:21.0.13.0.10-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:21.0.13.0.10-1.amzn2023.1
  • H
Incorrect Implementation of Authentication Algorithm

<1:21.0.13.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:21.0.13.0.10-1.amzn2023.1
  • H
Exposure of Data Element to Wrong Session

<1:21.0.13.0.10-1.amzn2023.1
  • H
XML Injection

<1:21.0.13.0.10-1.amzn2023.1
  • H
Out-of-bounds Read

<1:21.0.13.0.10-1.amzn2023.1
  • H
LDAP Injection

<1:21.0.13.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:21.0.13.0.10-1.amzn2023.1
  • H
Comparison Using Wrong Factors

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:21.0.13.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:21.0.13.0.10-1.amzn2023.1
  • H
Out-of-bounds Read

<1:21.0.13.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:21.0.13.0.10-1.amzn2023.1
  • H
Improper Validation of Syntactic Correctness of Input

<1:21.0.13.0.10-1.amzn2023.1
  • H
Out-of-bounds Write

<1:21.0.13.0.10-1.amzn2023.1
  • H
XML External Entity (XXE) Injection

<1:21.0.13.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:21.0.13.0.10-1.amzn2023.1
  • H
Insufficient Compartmentalization

<1:21.0.13.0.10-1.amzn2023.1
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<1:21.0.13.0.10-1.amzn2023.1
  • M
Allocation of Resources Without Limits or Throttling

<1:21.0.12+9-1.amzn2023.1
  • M
Improper Cross-boundary Removal of Sensitive Data

<1:21.0.12+9-1.amzn2023.1
  • M
Server-Side Request Forgery (SSRF)

<1:21.0.12+9-1.amzn2023.1
  • H
Improper Certificate Validation

<1:21.0.12+8-1.amzn2023.1
  • H
Out-of-bounds Write

<1:21.0.12+8-1.amzn2023.1
  • H
Inefficient Regular Expression Complexity

<1:21.0.12+8-1.amzn2023.1
  • H
Resource Exhaustion

<1:21.0.12+8-1.amzn2023.1
  • H
Improper Verification of Cryptographic Signature

<1:21.0.12+8-1.amzn2023.1
  • H
Resource Exhaustion

<1:21.0.12+8-1.amzn2023.1
  • H
NULL Pointer Dereference

<1:21.0.12+8-1.amzn2023.1
  • H
Improper Certificate Validation

<1:21.0.12+8-1.amzn2023.1
  • H
Out-of-bounds Read

<1:21.0.11+10-1.amzn2023.1
  • H
XML External Entity (XXE) Injection

<1:21.0.11+10-1.amzn2023.1
  • H
Uncontrolled Recursion

<1:21.0.11+10-1.amzn2023.1
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:21.0.11+10-1.amzn2023.1
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:21.0.11+10-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:21.0.11+10-1.amzn2023.1
  • H
Cleartext Transmission of Sensitive Information

<1:21.0.11+10-1.amzn2023.1
  • H
Improper Validation of Specified Type of Input

<1:21.0.10+7-1.amzn2023.1
  • H
CRLF Injection

<1:21.0.10+7-1.amzn2023.1
  • H
Key Exchange without Entity Authentication

<1:21.0.10+7-1.amzn2023.1
  • H
Improper Certificate Validation

<1:21.0.10+7-1.amzn2023.1
  • M
XML External Entity (XXE) Injection

<1:21.0.9+10-1.amzn2023.1
  • M
Inappropriate Encoding for Output Context

<1:21.0.9+10-1.amzn2023.1
  • M
Object Model Violation: Just One of Equals and Hashcode Defined

<1:21.0.9+10-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:21.0.8+9-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:21.0.8+9-1.amzn2023.1
  • H
Information Exposure

<1:21.0.8+9-1.amzn2023.1
  • H
Missing Required Cryptographic Step

<1:21.0.8+9-1.amzn2023.1
  • H
Buffer Overflow

<1:21.0.7+6-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:21.0.7+6-1.amzn2023.1
  • H
Information Exposure

<1:21.0.7+6-1.amzn2023.1
  • M
Signed to Unsigned Conversion Error

<1:21.0.6+7-1.amzn2023.1
  • M
Integer Overflow or Wraparound

<1:21.0.5+11-1.amzn2023.1
  • M
Uncontrolled Memory Allocation

<1:21.0.5+11-1.amzn2023.1
  • M
Improper Handling of Length Parameter Inconsistency

<1:21.0.5+11-1.amzn2023.1
  • M
Signed to Unsigned Conversion Error

<1:21.0.5+11-1.amzn2023.1
  • H
Out-of-bounds Write

<1:21.0.4+7-1.amzn2023.1
  • H
CVE-2024-21131

<1:21.0.4+7-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:21.0.4+7-1.amzn2023.1
  • H
CVE-2024-21147

<1:21.0.4+7-1.amzn2023.1
  • H
CVE-2024-21140

<1:21.0.4+7-1.amzn2023.1
  • L
Improper Output Neutralization for Logs

<1:21.0.3+9-1.amzn2023.1
  • L
Out-of-bounds Write

<1:21.0.3+9-1.amzn2023.1
  • L
Reliance on Reverse DNS Resolution for a Security-Critical Action

<1:21.0.3+9-1.amzn2023.1
  • L
Integer Overflow or Wraparound

<1:21.0.3+9-1.amzn2023.1
  • H
Covert Timing Channel

<1:21.0.2+13-1.amzn2023.1
  • H
Improper Input Validation

<1:21.0.2+13-1.amzn2023.1
  • H
CVE-2024-20922

<1:21.0.2+13-1.amzn2023.1
  • H
Improper Input Validation

<1:21.0.2+13-1.amzn2023.1
  • H
Information Exposure Through Log Files

<1:21.0.2+13-1.amzn2023.1
  • H
CVE-2024-20923

<1:21.0.2+13-1.amzn2023.1
  • H
Out-of-bounds Write

<1:21.0.2+13-1.amzn2023.1
  • H
CVE-2024-20925

<1:21.0.2+13-1.amzn2023.1
  • M
Out-of-Bounds

<1:21.0.1+12-1.amzn2023.1
  • M
Improper Certificate Validation

<1:21.0.1+12-1.amzn2023.1