buildah-tests vulnerabilities

Known vulnerabilities in the buildah-tests package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Use of Uninitialized Variable	*
M Improper Input Validation	*
M Improperly Controlled Sequential Memory Allocation	*
H Uncontrolled Recursion	*
M Uncontrolled Recursion	*
M Improper Input Validation	*
M Improper Validation of Integrity Check Value	*
H Memory Leak	<2:1.33.7-3.el9_4
H Link Following	<1:1.31.5-1.el9_3
M Improper Handling of Highly Compressed Data (Data Amplification)	<2:1.33.7-2.el9_4
M Resource Exhaustion	<2:1.33.7-2.el9_4
M Loop with Unreachable Exit Condition ('Infinite Loop')	<2:1.33.7-1.el9_4
M Improper Input Validation	<2:1.33.7-4.el9_4
M Improper Input Validation	<2:1.33.7-2.el9_4
M Truncation of Security-relevant Information	<1:1.31.4-1.el9_3
M Information Exposure	<2:1.33.6-2.el9
M Resource Exhaustion	<2:1.33.6-2.el9
M CVE-2023-39321	<1:1.31.3-2.el9_3
M Cross-site Scripting (XSS)	<1:1.31.3-2.el9_3
M Allocation of Resources Without Limits or Throttling	<1:1.31.3-2.el9_3
M Cross-site Scripting (XSS)	<1:1.31.3-2.el9_3
M Resource Exhaustion	<1:1.31.3-2.el9_3
M HTTP Response Splitting	<1:1.31.3-1.el9
M Improper Handling of Unicode Encoding	<1:1.31.3-1.el9
M Improper Handling of Unicode Encoding	<1:1.31.3-1.el9
M Improper Handling of Unicode Encoding	<1:1.31.3-1.el9
M Resource Exhaustion	<1:1.31.3-1.el9
M Arbitrary Code Injection	<1:1.31.3-1.el9
M Resource Exhaustion	<1:1.31.3-1.el9
M Resource Exhaustion	<1:1.31.3-1.el9
M Resource Exhaustion	<1:1.31.3-1.el9
M Resource Exhaustion	<1:1.31.3-1.el9
M Placement of User into Incorrect Group	<1:1.31.3-1.el9
M Allocation of Resources Without Limits or Throttling	<1:1.29.1-1.el9
M CVE-2022-41715	*
M Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
M Resource Exhaustion	*
M Placement of User into Incorrect Group	<1:1.27.0-2.el9
M Placement of User into Incorrect Group	<1:1.27.0-2.el9
L Resource Exhaustion	*
M Information Exposure	*
M Improperly Controlled Sequential Memory Allocation	*
M Improperly Controlled Sequential Memory Allocation	*
M Improperly Controlled Sequential Memory Allocation	*
M HTTP Request Smuggling	*
M Insufficient Entropy	<1:1.29.1-1.el9
M Use of a Broken or Risky Cryptographic Algorithm	<1:1.27.0-2.el9
L Access of Resource Using Incompatible Type ('Type Confusion')	*
M Race Condition	*
M Improper Input Validation	*
M Resource Exhaustion	<1:1.27.0-2.el9
M Improper Input Validation	<1:1.27.0-2.el9
M Improper Input Validation	<1:1.27.0-2.el9
M Improper Input Validation	*
M Improper Locking	<1:1.27.0-2.el9

Vulnerability

Vulnerable Version

Use of Uninitialized Variable