Homepage

kibana-9.3

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the kibana-9.3 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
GHSA-3wcj-gjvf-fvch

<9.3.1-r1
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.1-r1
  • L
Improper Input Validation

<9.3.8-r6
  • L
Improper Input Validation

<9.3.8-r6
  • L
GHSA-22jq-vg5j-6vgg

<9.3.8-r6
  • L
Insufficient Comparison

<9.3.8-r6
  • L
Resource Exhaustion

<9.3.8-r6
  • L
GHSA-2vr4-cq9g-pvrc

<9.3.8-r6
  • L
Server-Side Request Forgery (SSRF)

<9.3.8-r6
  • L
GHSA-6vj9-mwq6-2f5v

<9.3.8-r6
  • L
GHSA-v53p-9fqp-m79j

<9.3.8-r6
  • L
Insufficient Comparison

<9.3.8-r6
  • L
GHSA-rpw4-54j3-4h4q

<9.3.8-r6
  • L
GHSA-g57g-f23g-4646

<9.3.8-r6
  • L
Improper Input Validation

<9.3.8-r6
  • L
GHSA-j6r3-76f7-8jcv

<9.3.8-r6
  • L
GHSA-h3mg-xc3c-68pw

<9.3.8-r6
  • L
GHSA-4xrf-jv44-h6hh

<9.3.8-r6
  • L
GHSA-mwp4-54f8-5fhr

<9.3.8-r6
  • L
GHSA-8vvx-rff5-p5rq

<9.3.8-r6
  • L
GHSA-3wwx-pv8p-q78v

<9.3.8-r5
  • L
GHSA-m8rv-5g2x-5cg5

<9.3.8-r5
  • L
GHSA-4cwx-7wf7-3272

<9.3.8-r5
  • M
CVE-2026-16728

<9.3.8-r5
  • L
GHSA-v3r7-h72x-cjcm

<9.3.8-r5
  • H
CVE-2026-14643

<9.3.8-r5
  • M
CVE-2026-16729

<9.3.8-r5
  • C
CVE-2026-13697

<9.3.8-r5
  • L
GHSA-jr45-8vmc-qm54

<9.3.8-r5
  • L
CVE-2026-85024

<9.3.8-r5
  • M
CVE-2026-15157

<9.3.8-r5
  • L
GHSA-8xcm-r25x-g524

<9.3.8-r5
  • M
HTTP Response Splitting

<9.3.3-r0
  • L
GHSA-55cm-p4ww-685g

<9.3.3-r0
  • L
CVE-2026-75931

<9.3.8-r3
  • L
GHSA-79qm-7rj5-m7r9

<9.3.8-r3
  • L
GHSA-2x7j-588g-ccc2

<9.3.8-r3
  • L
GHSA-cc9r-2j5m-2m83

<9.3.8-r3
  • L
Exposure of Data Element to Wrong Session

<9.3.8-r3
  • L
GHSA-8m3c-c648-2xjj

<9.3.8-r3
  • M
Link Following

<9.3.8-r3
  • L
CVE-2026-76172

<9.3.8-r3
  • L
GHSA-jqff-g426-hqxp

<9.3.8-r3
  • L
GHSA-vwc7-r8mq-g2x9

<9.3.8-r3
  • L
GHSA-55q2-fjhq-7xh7

<9.3.8-r3
  • L
GHSA-f23p-vx2j-j53r

<9.3.8-r3
  • L
GHSA-gqvv-2mrq-wpjv

<9.3.8-r3
  • L
GHSA-fph4-wmhf-6fwf

<9.3.8-r3
  • L
CVE-2026-75975

<9.3.8-r3
  • L
Directory Traversal

<9.3.8-r3
  • L
GHSA-crvj-82cr-hjcx

<9.3.8-r3
  • L
Inefficient Regular Expression Complexity

<9.3.8-r3
  • L
GHSA-f65p-4m7j-42xc

<9.3.8-r3
  • L
GHSA-54fx-42gc-7vw4

<9.3.8-r3
  • L
CVE-2026-75899

<9.3.8-r3
  • L
Information Exposure

<9.3.8-r3
  • L
GHSA-g6gw-c38x-mqfc

<9.3.8-r3
  • L
Algorithmic Complexity

<9.3.8-r3
  • L
GHSA-wmmp-3585-3rmp

<9.3.8-r3
  • L
GHSA-5jgf-p345-68v8

<9.3.8-r3
  • L
HTTP Request Smuggling

<9.3.8-r3
  • L
Resource Exhaustion

<9.3.8-r3
  • L
GHSA-8j4g-w8fx-2239

<9.3.8-r3
  • L
GHSA-3mcp-22mf-vrw3

<9.3.8-r1
  • H
Uncontrolled Recursion

<9.3.8-r1
  • L
GHSA-h3hj-cmcx-xc66

<9.3.6-r1
  • H
External Control of File Name or Path

<9.3.6-r1
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.8-r1
  • L
GHSA-68jp-44vc-2x5h

<9.3.8-r1
  • H
Resource Exhaustion

<9.3.8-r1
  • M
Resource Exhaustion

<9.3.8-r1
  • L
GHSA-9wx3-p993-35vp

<9.3.8-r1
  • H
Information Exposure

<9.3.8-r1
  • L
GHSA-39j5-w47m-2gmv

<9.3.8-r1
  • L
GHSA-fqj3-h9pc-443h

<9.3.8-r1
  • L
GHSA-fq2j-3j99-rx65

<9.3.8-r1
  • H
Permissive Whitelist

<9.3.8-r1
  • H
Allocation of Resources Without Limits or Throttling

<9.3.8-r1
  • L
GHSA-6hqm-hm2v-3p2p

<9.3.8-r1
  • L
GHSA-4ww2-rjh2-xpv9

<9.3.8-r1
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.8-r1
  • H
Resource Exhaustion

<9.3.8-r1
  • L
GHSA-f2r5-pqh9-r8f8

<9.3.8-r1
  • L
Resource Exhaustion

<9.3.8-r1
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.8-r1
  • L
GHSA-38gx-cfqf-f652

<9.3.8-r1
  • L
GHSA-frvp-7c67-39w9

<9.3.8-r2
  • L
GHSA-xj6q-8x83-jv6g

<9.3.8-r1
  • L
GHSA-hcpx-6fm6-wx23

<9.3.8-r1
  • L
GHSA-7q8q-rj6j-mhjq

<9.3.8-r1
  • L
CVE-2026-12590

<9.3.8-r1
  • L
GHSA-gcfj-64vw-6mp9

<9.3.8-r1
  • L
GHSA-pmv8-rq9r-6j72

<9.3.8-r1
  • L
GHSA-mmx7-hfxf-jppx

<9.3.8-r1
  • L
CVE-2026-39244

<9.3.8-r1
  • L
Uncaught Exception

<9.3.8-r1
  • L
GHSA-f4gw-2p7v-4548

<9.3.8-r1
  • L
GHSA-jqh4-m9w3-8hp9

<9.3.8-r1
  • L
CVE-2026-14257

<9.3.8-r2
  • L
GHSA-mwf2-3pr3-8698

<9.3.8-r1
  • L
GHSA-45rx-2jwx-cxfr

<9.3.8-r1
  • L
GHSA-42h9-826w-cgv3

<9.3.8-r1
  • L
GHSA-r292-9mhp-454m

<9.3.8-r1
  • L
GHSA-xcpc-8h2w-3j85

<9.3.8-r1
  • L
GHSA-v422-hmwv-36x6

<9.3.8-r1
  • L
GHSA-mh99-v99m-4gvg

<9.3.8-r2
  • M
Protection Mechanism Failure

<9.3.5-r3
  • L
GHSA-x9g3-xrwr-cwfg

<9.3.8-r0
  • L
CVE-2026-13149

<9.3.8-r1
  • L
Arbitrary Code Injection

<9.3.8-r0
  • L
GHSA-3jxr-9vmj-r5cp

<9.3.8-r1
  • L
Algorithmic Complexity

<9.3.8-r0
  • L
GHSA-52cp-r559-cp3m

<9.3.8-r0
  • L
CVE-2026-12151

<9.3.5-r4
  • H
CVE-2026-6734

<9.3.5-r4
  • L
CVE-2026-56761

<9.3.3-r4
  • L
GHSA-pr7r-676h-xcf6

<9.3.5-r4
  • L
CVE-2026-9679

<9.3.5-r4
  • L
GHSA-vxpw-j846-p89q

<9.3.5-r4
  • L
GHSA-hm92-r4w5-c3mj

<9.3.5-r4
  • L
GHSA-rcvq-m9j9-6f4g

<9.3.6-r0
  • L
Directory Traversal

<9.3.6-r0
  • L
Allocation of Resources Without Limits or Throttling

<9.3.6-r1
  • L
CVE-2026-11525

<9.3.5-r4
  • L
GHSA-g8m3-5g58-fq7m

<9.3.5-r4
  • L
GHSA-p6gq-j5cr-w38f

<9.3.6-r1
  • L
GHSA-h67p-54hq-rp68

<9.3.6-r2
  • L
GHSA-35p6-xmwp-9g52

<9.3.5-r4
  • L
GHSA-p88m-4jfj-68fv

<9.3.5-r4
  • L
GHSA-hmw2-7cc7-3qxx

<9.3.6-r1
  • L
GHSA-8988-4f7v-96qf

<9.3.6-r1
  • L
CVE-2026-9697

<9.3.5-r4
  • L
CVE-2026-12143

<9.3.6-r1
  • L
Algorithmic Complexity

<9.3.6-r2
  • L
GHSA-vmh5-mc38-953g

<9.3.5-r4
  • L
CVE-2026-9678

<9.3.5-r4
  • L
CVE-2026-6733

<9.3.5-r4
  • L
GHSA-99f4-grh7-6pcq

<9.3.5-r3
  • L
GHSA-j6c9-x7qj-28xf

<9.3.5-r3
  • L
GHSA-vxr8-fq34-vvx9

<9.3.5-r3
  • L
Improper Encoding or Escaping of Output

<9.3.5-r3
  • L
Overly Permissive Cross-domain Whitelist

<9.3.5-r3
  • L
Cleartext Transmission of Sensitive Information

<9.3.5-r3
  • L
GHSA-wwfh-h76j-fc44

<9.3.5-r3
  • L
Uncaught Exception

<9.3.5-r3
  • L
GHSA-f38q-mgvj-vph7

<9.3.5-r3
  • L
GHSA-5375-pq7m-f5r2

<9.3.5-r3
  • L
Directory Traversal

<9.3.5-r3
  • L
Use of Less Trusted Source

<9.3.5-r3
  • L
GHSA-rv63-4mwf-qqc2

<9.3.5-r3
  • L
Insufficient Verification of Data Authenticity

<9.3.5-r3
  • L
GHSA-88fw-hqm2-52qc

<9.3.5-r3
  • L
GHSA-wgpf-jwqj-8h8p

<9.3.5-r3
  • L
GHSA-x426-x7cc-3fpc

<9.3.5-r3
  • L
Uncontrolled Recursion

<9.3.5-r3
  • L
Uncaught Exception

<9.3.5-r3
  • M
HTTP Response Splitting

<9.3.5-r2
  • L
GHSA-3644-q5cj-c5c7

<9.3.5-r2
  • L
Unintended Proxy or Intermediary ('Confused Deputy')

<9.3.5-r2
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.5-r2
  • L
GHSA-pjwm-pj3p-43mv

<9.3.5-r2
  • L
Deserialization of Untrusted Data

<9.3.5-r2
  • L
GHSA-898c-q2cr-xwhg

<9.3.5-r2
  • L
Server-Side Request Forgery (SSRF)

<9.3.5-r2
  • L
GHSA-qjx8-664m-686j

<9.3.5-r2
  • L
GHSA-35jp-ww65-95wh

<9.3.5-r2
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.5-r2
  • L
GHSA-654m-c8p4-x5fp

<9.3.5-r2
  • H
Resource Exhaustion

<9.3.5-r1
  • L
GHSA-jxxr-4gwj-5jf2

<9.3.5-r1
  • L
GHSA-q7rr-3cgh-j5r3

<9.3.5-r0
  • L
GHSA-36hh-x5p5-jgc8

<9.3.5-r0
  • L
Interpretation Conflict

<9.3.5-r0
  • L
Improper Handling of Exceptional Conditions

<9.3.5-r0
  • L
CVE-2026-8723

<9.3.5-r0
  • L
Information Exposure

<9.3.5-r0
  • L
GHSA-vhjm-w67q-g75c

<9.3.5-r0
  • L
GHSA-q8mj-m7cp-5q26

<9.3.5-r0
  • L
GHSA-vf2m-468p-8v99

<9.3.4-r4
  • L
GHSA-69xw-7hcm-h432

<9.3.4-r4
  • L
Improper Handling of Unicode Encoding

<9.3.4-r4
  • L
Arbitrary Code Injection

<9.3.4-r4
  • H
Use of Uninitialized Resource

<9.3.4-r4
  • L
HTTP Response Splitting

<9.3.4-r4
  • C
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<9.3.4-r4
  • L
GHSA-685m-2w69-288q

<9.3.4-r4
  • H
Arbitrary Code Injection

<9.3.4-r4
  • L
GHSA-66ff-xgx4-vchm

<9.3.4-r4
  • L
GHSA-58qx-3vcg-4xpx

<9.3.4-r4
  • L
GHSA-75px-5xx7-5xc7

<9.3.4-r4
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.4-r4
  • H
Server-Side Request Forgery (SSRF)

<9.3.4-r4
  • L
Improper Validation of Specified Quantity in Input

<9.3.4-r4
  • L
Resource Exhaustion

<9.3.4-r4
  • L
GHSA-9vqf-7f2p-gf9v

<9.3.4-r4
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.4-r4
  • L
Information Exposure Through Caching

<9.3.4-r4
  • L
GHSA-rpmf-866q-6p89

<9.3.4-r4
  • L
Resource Exhaustion

<9.3.4-r4
  • L
CRLF Injection

<9.3.4-r4
  • L
GHSA-fx83-v9x8-x52w

<9.3.4-r4
  • L
GHSA-62hf-57xw-28j9

<9.3.4-r4
  • L
Allocation of Resources Without Limits or Throttling

<9.3.4-r4
  • L
GHSA-jvwf-75h9-cwgg

<9.3.4-r4
  • L
GHSA-5c9x-8gcm-mpgx

<9.3.4-r4
  • L
GHSA-pmwg-cvhr-8vh7

<9.3.4-r4
  • L
GHSA-hm8q-7f3q-5f36

<9.3.4-r4
  • H
Uncontrolled Recursion

<9.3.4-r4
  • C
Permissive Whitelist

<9.3.4-r4
  • L
GHSA-pf86-5x62-jrwf

<9.3.4-r4
  • L
GHSA-qp7p-654g-cw7p

<9.3.4-r4
  • L
Arbitrary Code Injection

<9.3.4-r4
  • H
Uncontrolled Recursion

<9.3.4-r4
  • L
GHSA-q3j6-qgpj-74h6

<9.3.4-r4
  • L
GHSA-xx6v-rp6x-q39c

<9.3.4-r4
  • L
GHSA-3w6x-2g7m-8v23

<9.3.4-r4
  • L
Permissive Whitelist

<9.3.4-r4
  • L
Uncontrolled Recursion

<9.3.4-r4
  • L
GHSA-445q-vr5w-6q77

<9.3.4-r4
  • L
GHSA-q8qp-cvcw-x6jj

<9.3.4-r4
  • L
GHSA-p77w-8qqv-26rm

<9.3.4-r4
  • L
GHSA-xhjh-pmcv-23jw

<9.3.4-r4
  • L
Improper Input Validation

<9.3.4-r4
  • L
GHSA-jggg-4jg4-v7c6

<9.3.4-r4
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.4-r4
  • C
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.4-r4
  • M
Arbitrary Code Injection

<9.3.4-r4
  • L
GHSA-6chq-wfr3-2hj9

<9.3.4-r4
  • L
GHSA-q6x5-8v7m-xcrf

<9.3.4-r4
  • L
GHSA-m7pr-hjqh-92cm

<9.3.4-r4
  • M
Improper Authentication

<9.3.4-r4
  • L
GHSA-v39h-62p7-jpjc

<9.3.4-r4
  • L
GHSA-v2v4-37r5-5v8g

<9.3.4-r4
  • M
Cross-site Scripting (XSS)

<9.3.4-r4
  • L
GHSA-w9j2-pvgh-6h63

<9.3.4-r4
  • L
CVE-2026-6322

<9.3.4-r4
  • L
CVE-2026-6321

<9.3.4-r4
  • L
GHSA-2pr8-phx7-x9h3

<9.3.4-r4
  • L
Allocation of Resources Without Limits or Throttling

<9.3.4-r4
  • L
Improper Encoding or Escaping of Output

<9.3.4-r4
  • L
GHSA-w5hq-g745-h8pq

<9.3.4-r3
  • H
Out-of-bounds Write

<9.3.4-r3
  • H
Resource Exhaustion

<9.3.4-r0
  • L
GHSA-f886-m6hf-6m8v

<9.3.4-r0
  • L
Resource Exhaustion

<9.3.3-r5
  • L
Information Exposure

<9.3.3-r4
  • L
GHSA-4rc3-7j7w-m548

<9.3.3-r6
  • M
Uncontrolled Recursion

<9.3.3-r6
  • L
GHSA-rp42-5vxx-qpwr

<9.3.3-r5
  • L
GHSA-xq3m-2v4x-88gg

<9.3.3-r5
  • C
Arbitrary Code Injection

<9.3.3-r5
  • H
Inefficient Regular Expression Complexity

<9.3.3-r4
  • L
Directory Traversal

<9.3.3-r4
  • C
CVE-2026-4800

<9.3.3-r4
  • L
GHSA-458j-xx4x-4375

<9.3.3-r4
  • L
GHSA-r4q5-vmmm-2653

<9.3.3-r4
  • L
GHSA-92pp-h63x-v22m

<9.3.3-r4
  • L
GHSA-chqc-8p9q-pq6q

<9.3.3-r4
  • L
GHSA-r5fr-rjxr-66jc

<9.3.3-r4
  • L
CRLF Injection

<9.3.3-r4
  • L
GHSA-6v7q-wjvx-w8wg

<9.3.3-r4
  • L
GHSA-fw9q-39r9-c252

<9.3.3-r4
  • L
GHSA-f23m-r3pf-42rh

<9.3.3-r4
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.3-r4
  • L
GHSA-jg4p-7fhp-p32p

<9.3.3-r4
  • L
GHSA-rr7j-v2q5-chgv

<9.3.3-r4
  • M
CVE-2026-2950

<9.3.3-r4
  • L
CVE-2026-4923

<9.3.3-r4
  • L
CVE-2026-4926

<9.3.3-r4
  • L
GHSA-q67f-28xg-22rw

<9.3.3-r4
  • L
GHSA-2328-f5f3-gj25

<9.3.3-r4
  • L
Improper Input Validation

<9.3.3-r4
  • L
GHSA-3p68-rc4w-qgx5

<9.3.3-r4
  • C
Unintended Proxy or Intermediary ('Confused Deputy')

<9.3.3-r4
  • L
GHSA-ppp5-5v6c-4jwp

<9.3.3-r4
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<9.3.3-r4
  • M
HTTP Response Splitting

<9.3.3-r4
  • L
GHSA-5m6q-g25r-mvwx

<9.3.3-r4
  • L
Improper Verification of Cryptographic Signature

<9.3.3-r4
  • L
GHSA-27v5-c462-wpq7

<9.3.3-r4
  • L
GHSA-j3q9-mxjg-w52f

<9.3.3-r4
  • L
GHSA-fvcv-3m26-pcqx

<9.3.3-r4
  • C
Improper Certificate Validation

<9.3.3-r4
  • L
GHSA-c7w3-x93f-qmm8

<9.3.5-r0
  • L
GHSA-vvjj-xcjg-gr5g

<9.3.5-r0
  • L
Uncontrolled Recursion

<9.3.5-r0
  • L
GHSA-48c2-rrv3-qjmp

<9.3.5-r0
  • L
Inefficient Regular Expression Complexity

<9.3.5-r0
  • L
GHSA-3v7f-55p6-f55p

<9.3.5-r0
  • L
GHSA-c2c7-rcm5-vvqj

<9.3.5-r0
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<9.3.5-r0
  • L
GHSA-56p5-8mhr-2fph

<9.3.3-r0
  • L
CVE-2026-39410

<9.3.3-r0
  • L
GHSA-wmmm-f939-6g9c

<9.3.3-r0
  • L
GHSA-v273-448j-v4qj

<9.3.3-r0
  • M
Resource Exhaustion

<9.3.3-r0
  • L
GHSA-rv5g-f82m-qrvv

<9.3.3-r0
  • L
Directory Traversal

<9.3.3-r0
  • H
Directory Traversal

<9.3.3-r0
  • L
GHSA-xf4j-xp2r-rqqx

<9.3.3-r0
  • L
GHSA-mmg9-6m6j-jqqx

<9.3.3-r0
  • M
Incorrect Behavior Order: Validate Before Canonicalize

<9.3.3-r0
  • L
GHSA-xpcf-pg52-r92g

<9.3.3-r0
  • H
Symlink Following

<9.3.3-r0
  • L
GHSA-r5rp-j6wh-rvv4

<9.3.3-r0
  • H
CVE-2026-39412

<9.3.3-r0
  • M
Directory Traversal

<9.3.3-r0
  • L
GHSA-26pp-8wgv-hjvm

<9.3.3-r0
  • L
GHSA-xhpv-hc6g-r9c6

<9.3.2-r2
  • L
GHSA-3mfm-83xf-c92r

<9.3.2-r2
  • L
GHSA-2w6w-674q-4c4q

<9.3.2-r2
  • M
Cross-site Scripting (XSS)

<9.3.2-r2
  • L
GHSA-7rx3-28cr-v5wh

<9.3.2-r2
  • L
Arbitrary Code Injection

<9.3.2-r2
  • L
GHSA-442j-39wm-28r2

<9.3.2-r2
  • H
Cross-site Scripting (XSS)

<9.3.2-r2
  • L
GHSA-xjpj-3mr7-gcpf

<9.3.2-r2
  • L
Arbitrary Code Injection

<9.3.2-r2
  • L
Improper Check for Unusual or Exceptional Conditions

<9.3.2-r2
  • L
GHSA-2qvq-rjwj-gvw9

<9.3.2-r2
  • L
Arbitrary Code Injection

<9.3.2-r2
  • L
GHSA-9cx6-37pm-9jff

<9.3.2-r2
  • L
GHSA-4992-7rv2-5pvq

<9.3.2-r0
  • L
CVE-2026-1526

<9.3.2-r0
  • L
GHSA-2g4f-4pwh-qvx6

<9.3.2-r0
  • L
CVE-2026-1527

<9.3.2-r0
  • L
GHSA-vrm6-8vpv-qv8q

<9.3.2-r0
  • L
GHSA-gmq8-994r-jv83

<9.3.2-r0
  • L
CVE-2026-2581

<9.3.2-r0
  • L
CVE-2026-2229

<9.3.2-r0
  • C
CVE-2026-1525

<9.3.2-r0
  • L
GHSA-2mjp-6q6p-2qxm

<9.3.2-r0
  • L
Inefficient Regular Expression Complexity

<9.3.2-r0
  • L
CVE-2026-1528

<9.3.2-r0
  • M
Off-by-one Error

<9.3.2-r0
  • L
GHSA-v9p9-hfj2-hcw8

<9.3.2-r0
  • L
GHSA-phc3-fgpg-7m6h

<9.3.2-r0
  • L
GHSA-f269-vfmq-vjvj

<9.3.2-r0
  • L
GHSA-wmfp-5q7x-987x

<9.3.1-r1
  • L
Allocation of Resources Without Limits or Throttling

<9.3.1-r1
  • M
Directory Traversal

<9.3.1-r1
  • M
Cross-site Scripting (XSS)

<9.3.1-r1
  • L
GHSA-9ppj-qmqm-q256

<9.3.1-r1
  • H
Directory Traversal

<9.3.1-r1
  • L
CVE-2026-3449

<9.3.5-r0
  • L
GHSA-46wh-pxpv-q5gq

<9.3.1-r1
  • L
GHSA-vpq2-c234-7xj6

<9.3.5-r0
  • L
GHSA-v8w9-8mx6-g223

<9.3.1-r1
  • L
GHSA-v2wj-7wpq-c8vv

<9.3.1-r1
  • H
Buffer Overflow

<9.3.1-r1
  • L
Algorithmic Complexity

<9.3.0-r2
  • L
GHSA-378v-28hj-76wf

<9.3.0-r2
  • L
Server-Side Request Forgery (SSRF)

<9.3.0-r2
  • L
GHSA-5rq4-664w-9x2c

<9.3.0-r2
  • L
GHSA-v34v-rq6j-cj6p

<9.3.0-r2
  • H
Inefficient Regular Expression Complexity

<9.3.0-r2
  • L
GHSA-23c5-xmqv-rm74

<9.3.0-r2
  • L
Inefficient Regular Expression Complexity

<9.3.0-r2
  • L
GHSA-fj3w-jwp8-x2g3

<9.3.1-r1
  • L
GHSA-7r86-cg39-jmmj

<9.3.0-r2
  • C
Directory Traversal

<9.3.0-r2
  • L
GHSA-3ppc-4f35-3m26

<9.3.0-r2
  • L
CVE-2026-2739

<9.3.0-r2
  • L
GHSA-38c4-r59v-3vqw

<9.3.0-r1
  • L
GHSA-m7jm-9gc2-mpf2

<9.3.0-r1
  • L
Incorrect Regular Expression

<9.3.0-r1
  • L
GHSA-37qj-frw5-hhjh

<9.3.0-r1
  • H
OS Command Injection

<9.3.0-r1
  • L
GHSA-5vv4-hvf7-2h46

<9.3.0-r1
  • H
CVE-2026-2327

<9.3.0-r1
  • L
Improper Input Validation

<9.3.0-r1
  • L
Improper Check for Unusual or Exceptional Conditions

<9.3.0-r1
  • L
GHSA-gq3j-xvxp-8hrf

<9.3.0-r1
  • L
OS Command Injection

<9.3.0-r1
  • L
GHSA-wphj-fx3q-84ch

<9.3.0-r1
  • L
GHSA-43fc-jf86-j433

<9.3.0-r1
  • L
OS Command Injection

<9.3.0-r1
  • L
GHSA-9c88-49p5-5ggf

<9.3.0-r1
  • L
GHSA-jmr7-xgp7-cmfj

<9.3.0-r1
  • L
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<9.3.0-r1