java-25-amazon-corretto-devel

Direct Vulnerabilities

Known vulnerabilities in the java-25-amazon-corretto-devel package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Certificate Validation	<1:25.0.5.0.10-1.amzn2023.1
H HTTP Request Smuggling	<1:25.0.5.0.9-1.amzn2023.1
H Improper Validation of Syntactic Correctness of Input	<1:25.0.5.0.9-1.amzn2023.1
H Improper Certificate Validation	<1:25.0.5.0.9-1.amzn2023.1
H Out-of-bounds Read	<1:25.0.5.0.9-1.amzn2023.1
H Exposed Dangerous Method or Function	<1:25.0.5.0.9-1.amzn2023.1
H Improper Certificate Validation	<1:25.0.5.0.9-1.amzn2023.1
H Improper Certificate Validation	<1:25.0.5.0.9-1.amzn2023.1
H Improper Certificate Validation	<1:25.0.5.0.9-1.amzn2023.1
H Out-of-bounds Write	<1:25.0.5.0.9-1.amzn2023.1
H Improperly Implemented Security Check for Standard	<1:25.0.5.0.9-1.amzn2023.1
H Directory Traversal	<1:25.0.5.0.9-1.amzn2023.1
H Exposed Dangerous Method or Function	<1:25.0.5.0.9-1.amzn2023.1
H Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<1:25.0.5.0.9-1.amzn2023.1
H Out-of-bounds Read	<1:25.0.5.0.9-1.amzn2023.1
H Compiler Optimization Removal or Modification of Security-critical Code	<1:25.0.5.0.9-1.amzn2023.1
H Incorrect Implementation of Authentication Algorithm	<1:25.0.5.0.9-1.amzn2023.1
H Comparison Using Wrong Factors	<1:25.0.5.0.9-1.amzn2023.1
H HTTP Request Smuggling	<1:25.0.5.0.9-1.amzn2023.1
H Allocation of Resources Without Limits or Throttling	<1:25.0.5.0.9-1.amzn2023.1
H Directory Traversal	<1:25.0.5.0.9-1.amzn2023.1
H Improper Validation of Syntactic Correctness of Input	<1:25.0.5.0.9-1.amzn2023.1
H Exposure of Data Element to Wrong Session	<1:25.0.5.0.9-1.amzn2023.1
H Allocation of Resources Without Limits or Throttling	<1:25.0.5.0.9-1.amzn2023.1
H Directory Traversal	<1:25.0.5.0.9-1.amzn2023.1
H CRLF Injection	<1:25.0.5.0.9-1.amzn2023.1
H Improperly Implemented Security Check for Standard	<1:25.0.5.0.9-1.amzn2023.1
H Exposed Dangerous Method or Function	<1:25.0.5.0.9-1.amzn2023.1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:25.0.5.0.9-1.amzn2023.1
H Directory Traversal	<1:25.0.5.0.9-1.amzn2023.1
H Information Exposure Through Caching	<1:25.0.5.0.9-1.amzn2023.1
H Insufficient Compartmentalization	<1:25.0.5.0.9-1.amzn2023.1
H XML External Entity (XXE) Injection	<1:25.0.5.0.9-1.amzn2023.1
H Improper Handling of Highly Compressed Data (Data Amplification)	<1:25.0.5.0.9-1.amzn2023.1
H Allocation of Resources Without Limits or Throttling	<1:25.0.5.0.9-1.amzn2023.1
H Improper Validation of Integrity Check Value	<1:25.0.5.0.9-1.amzn2023.1
H Improperly Implemented Security Check for Standard	<1:25.0.5.0.9-1.amzn2023.1
H HTTP Request Smuggling	<1:25.0.5.0.9-1.amzn2023.1
H Insufficient Compartmentalization	<1:25.0.5.0.9-1.amzn2023.1
H Directory Traversal	<1:25.0.5.0.9-1.amzn2023.1
H HTTP Request Smuggling	<1:25.0.5.0.9-1.amzn2023.1
H XML Injection	<1:25.0.5.0.9-1.amzn2023.1
H XML Injection	<1:25.0.5.0.9-1.amzn2023.1
H LDAP Injection	<1:25.0.5.0.9-1.amzn2023.1
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<1:25.0.5.0.9-1.amzn2023.1
H Incorrect Implementation of Authentication Algorithm	<1:25.0.5.0.9-1.amzn2023.1
H Allocation of Resources Without Limits or Throttling	<1:25.0.4+8-1.amzn2023.1
H Server-Side Request Forgery (SSRF)	<1:25.0.4+8-1.amzn2023.1
H Improper Cross-boundary Removal of Sensitive Data	<1:25.0.4+8-1.amzn2023.1
H Uncaught Exception	<1:25.0.4+8-1.amzn2023.1
H Improper Certificate Validation	<1:25.0.4+7-1.amzn2023.1
H Improper Verification of Cryptographic Signature	<1:25.0.4+7-1.amzn2023.1
H Inefficient Regular Expression Complexity	<1:25.0.4+7-1.amzn2023.1
H Out-of-bounds Write	<1:25.0.4+7-1.amzn2023.1
H Resource Exhaustion	<1:25.0.4+7-1.amzn2023.1
H NULL Pointer Dereference	<1:25.0.4+7-1.amzn2023.1
H Resource Exhaustion	<1:25.0.4+7-1.amzn2023.1
H Improper Certificate Validation	<1:25.0.4+7-1.amzn2023.1
H Use of a Broken or Risky Cryptographic Algorithm	<1:25.0.3+9-1.amzn2023.1
H Cleartext Transmission of Sensitive Information	<1:25.0.3+9-1.amzn2023.1
H Heap-based Buffer Overflow	<1:25.0.3+9-1.amzn2023.1
H Out-of-bounds Read	<1:25.0.3+9-1.amzn2023.1
H Use of a Broken or Risky Cryptographic Algorithm	<1:25.0.3+9-1.amzn2023.1
H Uncontrolled Recursion	<1:25.0.3+9-1.amzn2023.1
H XML External Entity (XXE) Injection	<1:25.0.3+9-1.amzn2023.1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:25.0.3+9-1.amzn2023.1
H Key Exchange without Entity Authentication	<1:25.0.2+10-1.amzn2023.1
H CRLF Injection	<1:25.0.2+10-1.amzn2023.1
H Improper Certificate Validation	<1:25.0.2+10-1.amzn2023.1
H Improper Validation of Specified Type of Input	<1:25.0.2+10-1.amzn2023.1
M Inappropriate Encoding for Output Context	<1:25.0.1+8-1.amzn2023.1
M Object Model Violation: Just One of Equals and Hashcode Defined	<1:25.0.1+8-1.amzn2023.1
M XML External Entity (XXE) Injection	<1:25.0.1+8-1.amzn2023.1

Vulnerability

Vulnerable Version

Improper Certificate Validation

<1:25.0.5.0.10-1.amzn2023.1