tez | Snyk

Direct Vulnerabilities

Known vulnerabilities in the tez package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-44891	<0.10.5-r20
L GHSA-vhch-2wf3-m8rp	<0.10.5-r20
L GHSA-47qp-hqvx-6r3f	<0.10.5-r19
L GHSA-2r2c-cx56-8933	<0.10.5-r19
L GHSA-j3rv-43j4-c7qm	<0.10.5-r17
L Uncontrolled Recursion	<0.10.5-r18
L GHSA-rmj7-2vxq-3g9f	<0.10.5-r17
L GHSA-hgj6-7826-r7m5	<0.10.5-r17
L GHSA-337m-mw94-2v6g	<0.10.5-r18
L Incomplete Blacklist	<0.10.5-r17
L Server-Side Request Forgery (SSRF)	<0.10.5-r17
L Incomplete Blacklist	<0.10.5-r17
L Improper Access Control	<0.10.5-r16
L Allocation of Resources Without Limits or Throttling	<0.10.5-r16
L GHSA-w573-9ffj-6ff9	<0.10.5-r16
L GHSA-5xrh-qmmq-w6ch	<0.10.5-r16
L GHSA-3p8m-j85q-pgmj	<0.10.5-r16
L Allocation of Resources Without Limits or Throttling	<0.10.5-r16
L Use of Insufficiently Random Values	<0.10.5-r16
L GHSA-3qp7-7mw8-wx86	<0.10.5-r16
L GHSA-mj4r-2hfc-f8p6	<0.10.5-r16
L GHSA-676x-f7gg-47vc	<0.10.5-r16
L Improper Check or Handling of Exceptional Conditions	<0.10.5-r16
L HTTP Request Smuggling	<0.10.5-r16
L GHSA-hvcg-qmg6-jm4c	<0.10.5-r16
L GHSA-xmv7-r254-6q78	<0.10.5-r16
L Improper Verification of Cryptographic Signature	<0.10.5-r16
L GHSA-c653-97m9-rcg9	<0.10.5-r16
L GHSA-h2qv-fj59-j46j	<0.10.5-r16
H Improper Handling of Highly Compressed Data (Data Amplification)	<0.10.5-r16
L GHSA-5pvg-856g-cp85	<0.10.5-r16
L Information Exposure	<0.10.5-r16
L GHSA-cc37-9q2j-3hfv	<0.10.5-r16
H Memory Leak	<0.10.5-r16
C Insufficient Verification of Data Authenticity	<0.10.5-r16
C Insufficient Verification of Data Authenticity	<0.10.5-r16
L GHSA-x4gw-5cx5-pgmh	<0.10.5-r16
L Resource Exhaustion	<0.10.5-r16
L Resource Exhaustion	<0.10.5-r15
L GHSA-6jv9-x5w9-2ccm	<0.10.5-r15
L GHSA-6ghj-frrj-jjj3	<0.10.5-r15
H Memory Leak	<0.10.5-r15
L Resource Exhaustion	<0.10.5-r15
L GHSA-3244-j874-rhc2	<0.10.5-r15
C HTTP Request Smuggling	<0.10.5-r12
L CRLF Injection	<0.10.5-r12
L Information Exposure	<0.10.5-r13
H CRLF Injection	<0.10.5-r12
L GHSA-rgrr-p7gp-5xj7	<0.10.5-r12
C HTTP Request Smuggling	<0.10.5-r12
L GHSA-57rv-r2g8-2cj3	<0.10.5-r12
H HTTP Request Smuggling	<0.10.5-r12
L GHSA-cm33-6792-r9fm	<0.10.5-r12
L GHSA-38f8-5428-x5cv	<0.10.5-r12
L Integer Overflow or Wraparound	<0.10.5-r12
L Resource Exhaustion	<0.10.5-r12
H Resource Exhaustion	<0.10.5-r12
L GHSA-45q3-82m4-75jr	<0.10.5-r12
L GHSA-m4cv-j2px-7723	<0.10.5-r12
C Improper Input Validation	<0.10.5-r12
L GHSA-v8h7-rr48-vmmv	<0.10.5-r12
H HTTP Response Splitting	<0.10.5-r12
L GHSA-f6hv-jmp6-3vwv	<0.10.5-r12
L GHSA-xxqh-mfjm-7mv9	<0.10.5-r12
L GHSA-jfg9-48mv-9qgx	<0.10.5-r12
L GHSA-fmxf-pm6p-7xgm	<0.10.5-r13
L GHSA-rwm7-x88c-3g2p	<0.10.5-r11
L Missing Release of Resource after Effective Lifetime	<0.10.5-r11
L Information Exposure	<0.10.5-r11
L GHSA-cmxv-58fp-fm3g	<0.10.5-r11
L GHSA-84h7-rjj3-6jx4	<0.10.5-r10
L CRLF Injection	<0.10.5-r10
L HTTP Request Smuggling	<0.10.5-r10
L GHSA-pwqr-wmgm-9rr8	<0.10.5-r10
L GHSA-wf8f-6423-gfxg	<0.10.5-r9
L GHSA-h46c-h94j-95f3	<0.10.5-r9
L GHSA-72hv-8253-57qq	<0.10.5-r9
L Stack-based Buffer Overflow	<0.10.5-r9
L Information Exposure	<0.10.5-r9
L GHSA-crhr-qqj8-rpxc	<0.10.5-r8
H Information Exposure Through Log Files	<0.10.5-r8
H Improper Input Validation	<0.10.5-r7
L CRLF Injection	<0.10.5-r6
H HTTP Request Smuggling	<0.10.5-r5
H Allocation of Resources Without Limits or Throttling	<0.10.5-r4
L Uncontrolled Recursion	<0.10.5-r3
L CVE-2025-48734	<0.10.4-r9
H Deserialization of Untrusted Data	<0.10.4-r8
L Improper Authentication	<0.10.4-r8
L GHSA-4g8c-wm8x-jfhw	<0.10.5-r16
L CVE-2025-24970	<0.10.5-r16
L Deserialization of Untrusted Data	<0.10.4-r8
H Deserialization of Untrusted Data	<0.10.4-r6
M Allocation of Resources Without Limits or Throttling	<0.10.4-r6
H Out-of-bounds Write	<0.10.4-r6
L CVE-2024-29025	<0.10.4-r6
L CVE-2024-25638	<0.10.4-r6
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0.10.4-r6
M Improper Certificate Validation	<0.10.4-r6
L CVE-2024-12801	<0.10.4-r6
L CVE-2024-29857	<0.10.4-r6
L CVE-2024-12798	<0.10.4-r6
L Out-of-bounds Write	<0.10.4-r6
H CVE-2023-52428	<0.10.4-r6
L Out-of-bounds Write	<0.10.4-r6
L CVE-2024-30171	<0.10.4-r6
L Missing Authorization	<0.10.4-r6

Vulnerability

Vulnerable Version

CVE-2026-44891

<0.10.5-r20