knative-kafka-broker-fips-1.20

Direct Vulnerabilities

Known vulnerabilities in the knative-kafka-broker-fips-1.20 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L GHSA-6cqp-g7gg-8hr5	<1.20.3-r10
L Information Exposure Through Caching	<1.20.3-r10
M CRLF Injection	<1.20.3-r10
H Allocation of Resources Without Limits or Throttling	<1.20.3-r10
L GHSA-4mp9-239f-g9hg	<1.20.3-r10
L Resource Exhaustion	<1.20.3-r10
L GHSA-gcjf-9mgh-3p7g	<1.20.3-r10
L GHSA-mvh2-crg5-v77c	<1.20.3-r10
L GHSA-q4f6-jm68-57ww	<1.20.3-r10
L GHSA-jppx-w49h-x2qq	<1.20.3-r10
L GHSA-6jqx-86gh-f27w	<1.20.3-r10
H Resource Exhaustion	<1.20.3-r10
H HTTP Request Smuggling	<1.20.3-r10
L Resource Exhaustion	<1.20.3-r10
L GHSA-8c42-7qj2-3j46	<1.20.3-r10
L Improper Access Control	<1.20.3-r10
L GHSA-xcgv-8mv7-v8c7	<1.20.3-r8
L CVE-2026-39822	<1.20.3-r8
L CVE-2026-42505	<1.20.3-r8
L GHSA-ff52-ph69-cf7x	<1.20.3-r8
L GHSA-qpw4-5x99-6vjp	<1.20.3-r4
L GHSA-78mq-xcr3-xm33	<1.20.3-r4
L GHSA-45gg-vh54-h5m9	<1.20.3-r4
L GHSA-vgwf-h737-ff37	<1.20.3-r4
L GHSA-89gr-r52h-f8rx	<1.20.3-r4
L GHSA-rm3j-f69w-wqmq	<1.20.3-r4
L GHSA-x527-x647-q7gg	<1.20.3-r4
L GHSA-w879-237q-wc7r	<1.20.3-r4
L GHSA-f5wc-c3c7-36mc	<1.20.3-r4
L GHSA-jppx-rxg9-jmrx	<1.20.3-r4
L GHSA-q4h4-gmj2-qvw2	<1.20.3-r4
L GHSA-5cgq-3rg8-m6cv	<1.20.3-r4
L GHSA-9m57-25v3-79x9	<1.20.3-r4
L GHSA-563q-j3cm-6jxm	<1.20.3-r6
L GHSA-cm33-6792-r9fm	<1.20.3-r6
L Improper Access Control	<1.20.3-r6
L Resource Exhaustion	<1.20.3-r6
L GHSA-xxqh-mfjm-7mv9	<1.20.3-r6
L CRLF Injection	<1.20.3-r6
L Uncontrolled Memory Allocation	<1.20.3-r6
M Allocation of Resources Without Limits or Throttling	<1.20.3-r6
C HTTP Request Smuggling	<1.20.3-r6
L GHSA-cc37-9q2j-3hfv	<1.20.3-r6
L GHSA-m4cv-j2px-7723	<1.20.3-r6
H HTTP Request Smuggling	<1.20.3-r6
L GHSA-w8rr-5gcm-pp58	<1.20.3-r6
L HTTP Request Smuggling	<1.20.3-r6
L GHSA-hvcg-qmg6-jm4c	<1.20.3-r6
H Memory Leak	<1.20.3-r6
L GHSA-x4gw-5cx5-pgmh	<1.20.3-r6
L GHSA-3g76-f9xq-8vp6	<1.20.3-r6
C Insufficient Verification of Data Authenticity	<1.20.3-r6
L Improper Verification of Cryptographic Signature	<1.20.3-r6
C Insufficient Verification of Data Authenticity	<1.20.3-r6
L GHSA-mj4r-2hfc-f8p6	<1.20.3-r6
L GHSA-c2gf-v879-257j	<1.20.3-r6
L GHSA-676x-f7gg-47vc	<1.20.3-r6
L Improper Check or Handling of Exceptional Conditions	<1.20.3-r6
C HTTP Request Smuggling	<1.20.3-r6
C Improper Input Validation	<1.20.3-r6
L GHSA-3qp7-7mw8-wx86	<1.20.3-r6
L Resource Exhaustion	<1.20.3-r6
H HTTP Response Splitting	<1.20.3-r6
H Resource Exhaustion	<1.20.3-r6
L GHSA-5x3r-wrvg-rp6q	<1.20.3-r6
M Allocation of Resources Without Limits or Throttling	<1.20.3-r6
L GHSA-c653-97m9-rcg9	<1.20.3-r6
L GHSA-45q3-82m4-75jr	<1.20.3-r6
L GHSA-v8h7-rr48-vmmv	<1.20.3-r6
L GHSA-5pvg-856g-cp85	<1.20.3-r6
L GHSA-h2qv-fj59-j46j	<1.20.3-r6
L GHSA-f6hv-jmp6-3vwv	<1.20.3-r6
L Resource Exhaustion	<1.20.3-r6
L Use of Insufficiently Random Values	<1.20.3-r6
L Allocation of Resources Without Limits or Throttling	<1.20.3-r6
L GHSA-57rv-r2g8-2cj3	<1.20.3-r6
L GHSA-38f8-5428-x5cv	<1.20.3-r6
L GHSA-xmv7-r254-6q78	<1.20.3-r6
L Integer Overflow or Wraparound	<1.20.3-r6
L GHSA-4279-q6mj-392r	<1.20.3-r5
L GHSA-h524-452v-82p9	<1.20.3-r5
L CVE-2026-42507	<1.20.3-r5
L CVE-2026-42504	<1.20.3-r5
L CVE-2026-27145	<1.20.3-r5
L GHSA-h3gm-q7m7-mp28	<1.20.3-r5
L GHSA-p9h5-jm8x-mjm5	<1.20.3-r4
L Out-of-Bounds	<1.20.3-r4
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.20.3-r4
H Double Free	<1.20.3-r4
L Incorrect Type Conversion or Cast	<1.20.3-r4
M Out-of-bounds Write	<1.20.3-r4
L GHSA-5m4p-2gjx-p2g8	<1.20.3-r4
L GHSA-2283-wf8c-rw8r	<1.20.3-r4
L Integer Overflow or Wraparound	<1.20.3-r4
L Improper Certificate Validation	<1.20.3-r4
L GHSA-3v2c-x6q9-f697	<1.20.3-r4
L CVE-2026-39825	<1.20.3-r4
L GHSA-qc64-m6c2-v4x7	<1.20.3-r4
L CVE-2026-42501	<1.20.3-r4
L Cross-site Scripting (XSS)	<1.20.3-r4
L GHSA-497x-jcxf-m478	<1.20.3-r4
L Missing Authorization	<1.20.3-r4
L GHSA-8g2r-hhvj-mv99	<1.20.3-r4
L Improper Certificate Validation	<1.20.3-r4
L CVE-2026-46598	<1.20.3-r4
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<1.20.3-r4
L GHSA-h74g-238j-357m	<1.20.3-r4
L GHSA-qf3q-3h68-mmh2	<1.20.3-r4
H NULL Pointer Dereference	<1.20.3-r4
L GHSA-xq5j-9r39-c3vf	<1.20.3-r4
M Link Following	<1.20.3-r4
L Missing Authorization	<1.20.3-r4
L Deserialization of Untrusted Data	<1.20.3-r4
L CVE-2026-46595	<1.20.3-r4
L Improper Verification of Cryptographic Signature	<1.20.3-r4
H Allocation of Resources Without Limits or Throttling	<1.20.3-r4
L Improper Encoding or Escaping of Output	<1.20.3-r4
L CVE-2026-42499	<1.20.3-r4
L Improper Certificate Validation	<1.20.3-r4
L Allocation of Resources Without Limits or Throttling	<1.20.3-r3
L GHSA-mh2q-q3fh-2475	<1.20.3-r3
L GHSA-5qcv-4rpc-jp93	<1.20.3-r2
L Race Condition	<1.20.3-r2
L Information Exposure	<1.20.3-r2
L GHSA-cmp6-m4wj-q63q	<1.20.3-r2
L GHSA-jrg3-gfjw-hm96	<1.20.3-r2
L GHSA-gjvh-7jh8-7xhm	<1.20.3-r2
H Incorrect Authorization	<1.20.3-r2
H Improper Certificate Validation	<1.20.3-r2
H Allocation of Resources Without Limits or Throttling	<1.20.3-r2
L GHSA-5w89-2c2x-6x66	<1.20.3-r2
L CVE-2026-32280	<1.20.3-r2
L GHSA-m4pr-4j3g-9v7v	<1.20.3-r2
M Cross-site Scripting (XSS)	<1.20.3-r2
L GHSA-7mr4-xjxg-34g6	<1.20.3-r2
L GHSA-78h2-9frx-2jm8	<1.20.2-r5
L Uncaught Exception	<1.20.2-r5
H Allocation of Resources Without Limits or Throttling	<1.20.2-r4
L GHSA-w9fj-cfpg-grvv	<1.20.2-r4
L HTTP Request Smuggling	<1.20.2-r3
L GHSA-pwqr-wmgm-9rr8	<1.20.2-r3
L Untrusted Search Path	<1.20.2-r2
L GHSA-9h8m-3fm2-qjrq	<1.20.2-r2
L Improper Authorization	<1.20.2-r1
L GHSA-p77j-4mvh-x3m3	<1.20.2-r1

Vulnerability

Vulnerable Version

GHSA-6cqp-g7gg-8hr5

<1.20.3-r10