hubble-fips

Direct Vulnerabilities

Known vulnerabilities in the hubble-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
GHSA-wpfx-qch4-q5j2

<1.19.4-r18
  • L
CVE-2026-97031

<1.19.4-r18
  • L
CVE-2026-56866

<1.19.4-r18
  • L
CVE-2026-94439

<1.19.4-r18
  • L
CVE-2026-78663

<1.19.4-r19
  • L
CVE-2026-78659

<1.19.4-r19
  • L
CVE-2026-94448

<1.19.4-r18
  • L
GHSA-874m-fcc5-9gqf

<1.19.4-r18
  • L
GHSA-2gfw-j3c5-j46w

<1.19.4-r18
  • L
GHSA-f5vf-8pvc-394g

<1.19.4-r18
  • L
CVE-2026-97030

<1.19.4-r18
  • L
CVE-2026-78669

<1.19.4-r19
  • L
CVE-2026-94440

<1.19.4-r18
  • L
GHSA-22jx-p735-qcpm

<1.19.4-r18
  • L
GHSA-hq7w-2xrq-wp2j

<1.19.4-r18
  • L
CVE-2026-97032

<1.19.4-r19
  • L
CVE-2026-78660

<1.19.4-r19
  • L
GHSA-8wmf-6v46-5gfg

<1.19.4-r17
  • L
Information Exposure

<1.19.4-r17
  • L
GHSA-w7c2-w76w-5hmj

<1.19.4-r6
  • L
GHSA-2v4p-qf9q-27wj

<1.19.4-r16
  • L
Improper Validation of Array Index

<1.19.4-r16
  • L
Resource Exhaustion

<1.19.4-r15
  • L
GHSA-vp52-pcj8-j9qc

<1.19.4-r15
  • L
GHSA-xhgw-qwwf-pg32

<1.19.4-r11
  • M
Numeric Errors

<1.19.4-r11
  • L
CVE-2026-56858

<1.19.4-r10
  • L
CVE-2026-56860

<1.19.4-r10
  • L
GHSA-xc2p-8ggw-6cr5

<1.19.4-r10
  • L
GHSA-7qch-w8m5-g3h3

<1.19.4-r10
  • L
GHSA-76p8-fhrm-vpc7

<1.19.4-r10
  • L
CVE-2026-56862

<1.19.4-r10
  • L
GHSA-xphw-4f88-5f39

<1.19.4-r10
  • L
CVE-2026-33818

<1.19.4-r10
  • L
GHSA-25mv-j2qr-v5jq

<1.19.4-r10
  • L
CVE-2026-56859

<1.19.4-r10
  • L
GHSA-c974-w86c-vpfw

<1.19.4-r10
  • L
CVE-2026-56853

<1.19.4-r10
  • L
GHSA-gcjh-h69q-9w9g

<1.19.4-r9
  • L
GHSA-jpjm-c3r5-q96r

<1.19.4-r8
  • L
CVE-2026-56852

<1.19.4-r8
  • L
GHSA-hrxh-6v49-42gf

<1.19.4-r7
  • L
Missing Authorization

<1.19.4-r6
  • L
GHSA-ff52-ph69-cf7x

<1.19.4-r5
  • L
CVE-2026-42505

<1.19.4-r5
  • L
CVE-2026-2303

<1.19.4-r2
  • L
Uncontrolled Memory Allocation

<1.19.4-r4
  • L
GHSA-cp6g-7hqx-qxhp

<1.19.4-r2
  • L
GHSA-5wrp-cwcj-q835

<1.19.4-r4
  • L
GHSA-hfvc-g4fc-pqhx

<1.19.4-r3
  • H
Untrusted Search Path

<1.19.4-r3
  • L
CVE-2026-39821

<1.19.3-r4
  • L
GHSA-w2q5-6q6x-x959

<1.19.3-r4
  • L
CVE-2026-42504

<1.19.3-r3
  • L
GHSA-h524-452v-82p9

<1.19.3-r3
  • L
GHSA-h3gm-q7m7-mp28

<1.19.3-r3
  • L
CVE-2026-27145

<1.19.3-r3
  • L
GHSA-4279-q6mj-392r

<1.19.3-r3
  • L
CVE-2026-42507

<1.19.3-r3
  • L
GHSA-gj49-89wh-h4gj

<1.18.6-r7
  • M
Information Exposure

<1.18.6-r7
  • H
Double Free

<1.18.6-r6
  • L
GHSA-2283-wf8c-rw8r

<1.18.6-r6
  • L
GHSA-497x-jcxf-m478

<1.18.6-r6
  • L
GHSA-5m4p-2gjx-p2g8

<1.18.6-r6
  • L
CVE-2026-42499

<1.18.6-r6
  • L
GHSA-8g2r-hhvj-mv99

<1.18.6-r6
  • M
Link Following

<1.18.6-r6
  • H
NULL Pointer Dereference

<1.18.6-r6
  • L
GHSA-xq5j-9r39-c3vf

<1.18.6-r6
  • L
Improper Encoding or Escaping of Output

<1.18.6-r6
  • L
GHSA-qf3q-3h68-mmh2

<1.18.6-r6
  • L
GHSA-qc64-m6c2-v4x7

<1.18.6-r6
  • L
Cross-site Scripting (XSS)

<1.18.6-r6
  • L
GHSA-3v2c-x6q9-f697

<1.18.6-r6
  • L
CVE-2026-42501

<1.18.6-r6
  • L
GHSA-p9h5-jm8x-mjm5

<1.18.6-r6
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1.18.6-r6
  • M
Out-of-bounds Write

<1.18.6-r6
  • H
Allocation of Resources Without Limits or Throttling

<1.18.6-r6
  • L
GHSA-pc3f-x583-g7j2

<1.18.6-r6
  • L
Allocation of Resources Without Limits or Throttling

<1.18.6-r6
  • L
GHSA-5w89-2c2x-6x66

<1.19.3-r2
  • H
Allocation of Resources Without Limits or Throttling

<1.19.3-r2
  • H
Incorrect Authorization

<1.19.3-r2
  • H
Improper Certificate Validation

<1.19.3-r2
  • L
GHSA-7mr4-xjxg-34g6

<1.19.3-r2
  • L
GHSA-m4pr-4j3g-9v7v

<1.19.3-r2
  • L
CVE-2026-32280

<1.19.3-r2
  • M
Cross-site Scripting (XSS)

<1.19.3-r2
  • L
GHSA-gjvh-7jh8-7xhm

<1.19.3-r2
  • L
GHSA-jrg3-gfjw-hm96

<1.19.3-r2
  • L
GHSA-hxv8-4j4r-cqgv

<1.18.6-r4
  • M
Improper Access Control

<1.18.6-r4
  • L
Improper Authorization

<1.18.6-r3
  • L
GHSA-p77j-4mvh-x3m3

<1.18.6-r3
  • L
GHSA-rv83-g57w-fr8j

<1.18.6-r2
  • L
Direct Request ('Forced Browsing')

<1.18.6-r2
  • L
GHSA-j4j7-vw47-rhfq

<1.18.6-r2
  • L
GHSA-j3gx-2473-5fp8

<1.18.6-r2
  • L
Cross-site Scripting (XSS)

<1.18.6-r2
  • L
Directory Traversal

<1.18.6-r2
  • L
CVE-2025-4673

<1.17.3-r1
  • L
CVE-2025-22874

<1.17.3-r1
  • M
Cleartext Transmission of Sensitive Information

<1.17.2-r2
  • L
CVE-2025-22872

<1.17.2-r1
  • M
Incorrect Authorization

<1.17.1-r3
  • M
Open Redirect

<1.17.1-r2
  • L
CVE-2025-22870

<1.17.1-r2
  • L
CVE-2025-22866

<1.17.0-r0
  • L
CVE-2024-45336

<1.16.6-r0
  • L
CVE-2024-45341

<1.16.6-r0
  • L
Information Exposure

<1.16.6-r0
  • L
CVE-2024-45338

<1.16.5-r1
  • M
Improper Handling of Exceptional Conditions

<1.16.4-r0
  • L
CVE-2024-34156

<1.16.1-r0
  • L
CVE-2024-34155

<1.16.1-r0
  • L
CVE-2024-34158

<1.16.1-r0
  • H
CVE-2024-42486

<1.16.0-r1
  • M
Interpretation Conflict

<1.16.0-r1
  • L
CVE-2024-24791

<0.13.5-r2
  • M
CVE-2024-37307

<0.13.5-r1
  • L
CVE-2023-45288

<0.13.3-r1
  • L
CVE-2024-24786

<0.13.2-r1
  • M
Cleartext Transmission of Sensitive Information

<0.13.0-r0
  • M
Cleartext Transmission of Sensitive Information

<0.13.0-r0