osbuild-composer vulnerabilities

Known vulnerabilities in the osbuild-composer package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Use of Uninitialized Variable	*
H Uncontrolled Recursion	<0:101-2.el8_10
M Uncontrolled Recursion	*
M Improperly Controlled Sequential Memory Allocation	*
M Improper Input Validation	*
M Information Exposure Through Log Files	*
M Misinterpretation of Input	*
M Improper Validation of Integrity Check Value	*
H Memory Leak	<0:101-2.el8_10
M Race Condition	<0:101-1.el8
M Improper Handling of Highly Compressed Data (Data Amplification)	*
M SQL Injection	*
M SQL Injection	*
M Misinterpretation of Input	*
M Improper Input Validation	*
M Arbitrary Code Injection	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Input Validation	*
M Information Exposure	*
M Information Exposure	*
M Resource Exhaustion	*
M CVE-2023-39321	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	*
M HTTP Response Splitting	*
M Improper Handling of Unicode Encoding	*
M Improper Handling of Unicode Encoding	*
M Improper Handling of Unicode Encoding	*
M Resource Exhaustion	*
M Arbitrary Code Injection	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M HTTP Request Smuggling	*
M Allocation of Resources Without Limits or Throttling	<0:75-1.el8
M Algorithmic Complexity	*
M CVE-2022-41715	<0:75-1.el8
M Allocation of Resources Without Limits or Throttling	<0:75-1.el8
M HTTP Request Smuggling	<0:75-1.el8
M Resource Exhaustion	<0:75-1.el8
L Resource Exhaustion	*
M Information Exposure	*
M Improperly Controlled Sequential Memory Allocation	*
M Improperly Controlled Sequential Memory Allocation	*
M Improperly Controlled Sequential Memory Allocation	*
M Improperly Controlled Sequential Memory Allocation	*
M Improperly Controlled Sequential Memory Allocation	*
M Improperly Controlled Sequential Memory Allocation	*
M HTTP Request Smuggling	*
M Improper Input Validation	*

Vulnerability

Vulnerable Version

Use of Uninitialized Variable