Upgrade Amazon-Linux:2 libgs to version 0:9.54.0-9.amzn2.0.7 or higher. This issue was patched in ALAS2-2024-2708 .

pulumi vulnerabilities

Known vulnerabilities in the pulumi package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Resource Exhaustion	<3.145.0-r0
L GHSA-r9px-m959-cxf4	<3.145.0-r0
L GHSA-v725-9546-7q7m	<3.145.0-r0
L Arbitrary Argument Injection	<3.145.0-r0
L GHSA-w32m-9786-jp63	<3.143.0-r1
L CVE-2024-45338	<3.143.0-r1
L GHSA-v778-237x-gjrc	<3.143.0-r0
L CVE-2024-45337	<3.143.0-r0
L GHSA-2mj3-vfvx-fc43	<3.142.0-r1
L GHSA-gh5c-3h97-2f3q	<3.142.0-r1
L GHSA-q59j-vv4j-v33c	<3.142.0-r1
L CVE-2024-36620	<3.142.0-r1
L CVE-2024-36623	<3.142.0-r1
L CVE-2024-36621	<3.142.0-r1
L GHSA-8xfx-rj4p-23jm	<3.132.0-r0
L CVE-2024-34158	<3.132.0-r0
L GHSA-j7vj-rw65-4v26	<3.132.0-r0
L GHSA-crqm-pwhx-j97f	<3.132.0-r0
L CVE-2024-34155	<3.132.0-r0
L CVE-2024-34156	<3.132.0-r0
L GHSA-hw49-2p59-3mhj	<3.122.0-r1
L CVE-2024-24791	<3.122.0-r1
L GHSA-v6v8-xj6m-xwqh	<3.121.0-r1
M Information Exposure Through Log Files	<3.121.0-r1
M Race Condition	<3.119.0-r1
L GHSA-m5vv-6r4h-3vj9	<3.119.0-r1
L CVE-2023-45288	<3.112.0-r1
L GHSA-4v7x-pqxf-cx7m	<3.112.0-r1
L CVE-2024-24786	<3.110.0-r1
L GHSA-8r3f-844c-mc37	<3.110.0-r1
L GHSA-32ch-6x54-q4h9	<3.103.1-r3
L CVE-2023-45290	<3.103.1-r3
L GHSA-rr6r-cfgf-gc6h	<3.103.1-r3
L CVE-2024-24784	<3.103.1-r3
L CVE-2024-24783	<3.103.1-r3
L CVE-2023-45289	<3.103.1-r3
L CVE-2024-24785	<3.103.1-r3
L GHSA-3q2c-pvp5-3cqp	<3.103.1-r3
L GHSA-fgq5-q76c-gx78	<3.103.1-r3
L GHSA-j6m3-gc37-6r6q	<3.103.1-r3
H Origin Validation Error	<3.103.1-r2
L GHSA-xw73-rw38-6vjc	<3.103.1-r2
L GHSA-9763-4f94-gfch	<3.101.1-r1
H CVE-2023-49568	<3.99.0-r2
L GHSA-mw99-9chc-xw7r	<3.99.0-r2
M Improper Validation of Integrity Check Value	<3.99.0-r1
L GHSA-45x7-px36-x8w8	<3.99.0-r1
L GHSA-qppj-fm5r-hxr3	<3.91.1-r1
L GHSA-4374-p667-p6c8	<3.88.1-r1
L GHSA-2wrh-6pvc-2jm9	<3.88.1-r1
L GHSA-m425-mq94-257g	<3.91.1-r1
H Allocation of Resources Without Limits or Throttling	<3.88.1-r1
H CVE-2023-44487	<3.91.1-r1
M Cross-site Scripting (XSS)	<3.88.1-r1

Vulnerability

Vulnerable Version

Resource Exhaustion

<3.145.0-r0

GHSA-r9px-m959-cxf4

<3.145.0-r0

GHSA-v725-9546-7q7m

<3.145.0-r0

Arbitrary Argument Injection

<3.145.0-r0

GHSA-w32m-9786-jp63

<3.143.0-r1