airbyte-server

Direct Vulnerabilities

Known vulnerabilities in the airbyte-server package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Information Exposure Through Caching

<2.0.0-r13
  • L
GHSA-8c42-7qj2-3j46

<2.0.0-r13
  • L
GHSA-qv9r-c865-cp47

<2.0.0-r12
  • L
Improper Encoding or Escaping of Output

<2.0.0-r12
  • L
CVE-2026-54428

<2.0.0-r11
  • L
GHSA-v3jc-474w-2wm6

<2.0.0-r11
  • H
Missing Release of Resource after Effective Lifetime

<2.0.0-r8
  • L
GHSA-hf6x-8p5f-cgmf

<2.0.0-r10
  • L
CVE-2026-54399

<2.0.0-r10
  • L
CVE-2026-40984

<2.0.0-r9
  • L
CVE-2026-40983

<2.0.0-r9
  • L
GHSA-w737-wx49-qj23

<2.0.0-r9
  • L
GHSA-g3pr-3p32-fp23

<2.0.0-r9
  • L
Resource Exhaustion

<2.0.0-r8
  • L
GHSA-mhm7-754m-9p8w

<2.0.0-r8
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<2.0.0-r8
  • L
Improper Access Control

<2.0.0-r8
  • L
GHSA-4mp9-239f-g9hg

<2.0.0-r8
  • L
GHSA-mfg7-5gfp-c4w3

<2.0.0-r8
  • L
Resource Exhaustion

<2.0.0-r8
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<2.0.0-r8
  • L
GHSA-5jmj-h7xm-6q6v

<2.0.0-r8
  • M
CRLF Injection

<2.0.0-r8
  • L
GHSA-gcjf-9mgh-3p7g

<2.0.0-r8
  • L
Not Failing Securely ('Failing Open')

<2.0.0-r8
  • L
GHSA-558v-64gr-wgg4

<2.0.0-r8
  • L
GHSA-jppx-w49h-x2qq

<2.0.0-r8
  • L
GHSA-q4f6-jm68-57ww

<2.0.0-r8
  • L
Incorrect Authorization

<2.0.0-r8
  • L
GHSA-mvh2-crg5-v77c

<2.0.0-r8
  • L
GHSA-5gvw-p9qm-jgwh

<2.0.0-r8
  • L
GHSA-j92g-9f8w-j867

<2.0.0-r8
  • H
HTTP Request Smuggling

<2.0.0-r8
  • H
Allocation of Resources Without Limits or Throttling

<2.0.0-r8
  • M
HTTP Request Smuggling

<2.0.0-r8
  • L
GHSA-c69g-56f8-xwqj

<2.0.0-r8
  • L
GHSA-6jqx-86gh-f27w

<2.0.0-r8
  • L
GHSA-6cqp-g7gg-8hr5

<2.0.0-r8
  • H
Resource Exhaustion

<2.0.0-r8
  • L
GHSA-jhq6-gfmj-v8fx

<2.0.0-r7
  • L
CVE-2026-10532

<2.0.0-r7
  • L
GHSA-387m-935m-c4vw

<2.0.0-r6
  • L
GHSA-q6gh-6v2r-hjv3

<2.0.0-r6
  • L
GHSA-p47f-322f-whfh

<2.0.0-r4
  • L
CVE-2026-9828

<2.0.0-r4
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<2.0.0-r6
  • L
GHSA-43w5-mmxv-cpvh

<2.0.0-r6
  • L
GHSA-2hcp-gjrf-7fhc

<2.0.0-r6
  • L
Allocation of Resources Without Limits or Throttling

<2.0.0-r6
  • L
GHSA-5hh8-q8hv-fr38

<2.0.0-r3
  • L
GHSA-j3rv-43j4-c7qm

<2.0.0-r3
  • L
Incorrect Authorization

<2.0.0-r3
  • L
Incomplete Blacklist

<2.0.0-r3
  • L
Server-Side Request Forgery (SSRF)

<2.0.0-r3
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<2.0.0-r3
  • L
GHSA-hgj6-7826-r7m5

<2.0.0-r3
  • L
GHSA-rcqc-6cw3-h962

<2.0.0-r3
  • L
GHSA-9fxm-vc8v-hj55

<2.0.0-r3
  • L
Incomplete Blacklist

<2.0.0-r3
  • L
GHSA-rmj7-2vxq-3g9f

<2.0.0-r3
  • L
Incorrect Authorization

<2.0.0-r3
  • L
GHSA-w573-9ffj-6ff9

<2.0.0-r2
  • L
Information Exposure

<2.0.0-r2
  • L
GHSA-5x3r-wrvg-rp6q

<2.0.0-r1
  • L
GHSA-3qp7-7mw8-wx86

<2.0.0-r1
  • H
Resource Exhaustion

<2.0.0-r1
  • C
Insufficient Verification of Data Authenticity

<2.0.0-r1
  • L
Resource Exhaustion

<2.0.0-r1
  • C
Insufficient Verification of Data Authenticity

<2.0.0-r1
  • L
Use of Insufficiently Random Values

<2.0.0-r1
  • L
GHSA-x4gw-5cx5-pgmh

<2.0.0-r1
  • L
GHSA-xmv7-r254-6q78

<2.0.0-r1
  • L
Improper Access Control

<2.0.0-r1
  • L
GHSA-c2gf-v879-257j

<2.0.0-r1
  • L
GHSA-5pvg-856g-cp85

<2.0.0-r1
  • L
Allocation of Resources Without Limits or Throttling

<2.0.0-r1
  • L
GHSA-676x-f7gg-47vc

<2.0.0-r1