skopeo-tests

Direct Vulnerabilities

Known vulnerabilities in the skopeo-tests package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Certificate Validation	*
M Improper Input Validation	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
L Link Following	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Insecure Inherited Permissions	*
L Link Following	*
H Creation of Immutable Text Using String Concatenation	<2:1.22.2-5.el10_2
M Information Exposure	*
M Server-Side Request Forgery (SSRF)	*
H Excessive Platform Resource Consumption within a Loop	<2:1.22.2-5.el10_2
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<2:1.22.2-5.el10_2
H Allocation of Resources Without Limits or Throttling	<2:1.22.2-5.el10_2
H Allocation of Resources Without Limits or Throttling	<2:1.22.2-5.el10_2
H Cross-site Scripting (XSS)	<2:1.22.2-5.el10_2
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
L Time-of-check Time-of-use (TOCTOU)	*
H Uncontrolled Search Path Element	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M Improper Output Neutralization for Logs	*
L Missing Release of Resource after Effective Lifetime	*
M Improper Validation of Unsafe Equivalence in Input	*
H Multiple Locks of a Critical Resource	<2:1.22.2-2.el10_2
M HTTP Request Smuggling	*
H Allocation of Resources Without Limits or Throttling	<2:1.22.2-2.el10_2
M Excessive Platform Resource Consumption within a Loop	<2:1.22.2-2.el10_2
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
H Incorrect Calculation of Buffer Size	*
H Improper Certificate Validation	*
H Improper Validation of Syntactic Correctness of Input	<2:1.22.2-1.el10_2
M Improper Certificate Validation	<2:1.20.0-3.el10_1
M Directory Traversal	*
H Allocation of Resources Without Limits or Throttling	<2:1.20.0-3.el10_1
M Directory Traversal	*
M Server-Side Request Forgery (SSRF)	*
M NULL Pointer Dereference	*
M Server-Side Request Forgery (SSRF)	*
H Excessive Platform Resource Consumption within a Loop	<2:1.20.0-3.el10_1
M Improper Certificate Validation	*
M Creation of Immutable Text Using String Concatenation	*
M Allocation of Resources Without Limits or Throttling	<2:1.20.0-2.el10_1
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Allocation of Resources Without Limits or Throttling	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Information Exposure	*
M Allocation of Resources Without Limits or Throttling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Information Exposure	*
L Improper Verification of Cryptographic Signature	*
M Time-of-check Time-of-use (TOCTOU)	*
M Improper Input Validation	*
H Uncontrolled Recursion	*
M HTTP Request Smuggling	<2:1.18.1-2.el10_0
M Allocation of Resources Without Limits or Throttling	<2:1.18.1-1.el10_0

Vulnerability

Vulnerable Version

Improper Certificate Validation