cockpit-image-builder

Direct Vulnerabilities

Known vulnerabilities in the cockpit-image-builder package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Use of Blocking Code in Single-threaded, Non-blocking Context	*
H Allocation of Resources Without Limits or Throttling	*
H Use of Blocking Code in Single-threaded, Non-blocking Context	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Validation of Syntactic Correctness of Input	*
L Directory Traversal	*
M Improper Validation of Syntactic Correctness of Input	*
L Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Unchecked Input for Loop Condition	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Validation of Specified Index, Position, or Offset in Input	*
M Cross-site Scripting (XSS)	*
M Improper Handling of Case Sensitivity	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L Unchecked Input for Loop Condition	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Cross-site Scripting (XSS)	*
H Improper Neutralization	<0:94.4-1.el10_2
H HTTP Request Smuggling	*
H Improper Neutralization of Equivalent Special Elements	<0:94.4-1.el10_2
H Server-Side Request Forgery (SSRF)	<0:94.4-1.el10_2
H Improper Neutralization	<0:94.4-1.el10_2
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Expression Language Injection	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Deserialization of Untrusted Data	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Arbitrary Code Injection	<0:94.3-1.el10_2
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<0:94.3-1.el10_2

Vulnerability

Vulnerable Version

Improperly Controlled Modification of Dynamically-Determined Object Attributes