mc-fips | Snyk

Direct Vulnerabilities

Known vulnerabilities in the mc-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-111943	<0.20250813.083541-r30
L GHSA-hq7w-2xrq-wp2j	<0.20250813.083541-r26
L CVE-2026-94448	<0.20250813.083541-r26
L CVE-2026-78663	<0.20250813.083541-r27
L CVE-2026-97030	<0.20250813.083541-r26
L CVE-2026-78669	<0.20250813.083541-r27
L CVE-2026-78659	<0.20250813.083541-r27
L CVE-2026-94440	<0.20250813.083541-r26
L GHSA-22jx-p735-qcpm	<0.20250813.083541-r26
L CVE-2026-94439	<0.20250813.083541-r26
L GHSA-f5vf-8pvc-394g	<0.20250813.083541-r26
L GHSA-874m-fcc5-9gqf	<0.20250813.083541-r26
L CVE-2026-56866	<0.20250813.083541-r26
L GHSA-wpfx-qch4-q5j2	<0.20250813.083541-r26
L CVE-2026-97032	<0.20250813.083541-r27
L GHSA-2gfw-j3c5-j46w	<0.20250813.083541-r26
L CVE-2026-97031	<0.20250813.083541-r26
L GHSA-2v4p-qf9q-27wj	<0.20250813.083541-r25
L Improper Validation of Array Index	<0.20250813.083541-r25
L GHSA-vp52-pcj8-j9qc	<0.20250813.083541-r23
L Resource Exhaustion	<0.20250813.083541-r23
L GHSA-25mv-j2qr-v5jq	<0.20250813.083541-r20
L CVE-2026-56860	<0.20250813.083541-r20
L GHSA-xphw-4f88-5f39	<0.20250813.083541-r20
L GHSA-xc2p-8ggw-6cr5	<0.20250813.083541-r20
L GHSA-c974-w86c-vpfw	<0.20250813.083541-r20
L GHSA-76p8-fhrm-vpc7	<0.20250813.083541-r20
L GHSA-7qch-w8m5-g3h3	<0.20250813.083541-r20
L CVE-2026-33818	<0.20250813.083541-r20
L CVE-2026-56853	<0.20250813.083541-r20
L CVE-2026-56859	<0.20250813.083541-r20
L CVE-2026-56862	<0.20250813.083541-r20
L CVE-2026-56858	<0.20250813.083541-r20
L GHSA-jpjm-c3r5-q96r	<0.20250813.083541-r18
L CVE-2026-56852	<0.20250813.083541-r18
L GHSA-hrxh-6v49-42gf	<0.20250813.083541-r17
L GHSA-wg65-39gg-5wfj	<0.20250813.083541-r16
L Information Exposure	<0.20250813.083541-r16
L Resource Exhaustion	<0.20250813.083541-r16
L GHSA-8rm2-7qqf-34qm	<0.20250813.083541-r16
L GHSA-ff52-ph69-cf7x	<0.20250813.083541-r16
L CVE-2026-42505	<0.20250813.083541-r16
L CVE-2026-27145	<0.20250813.083541-r14
L GHSA-4279-q6mj-392r	<0.20250813.083541-r14
L GHSA-h3gm-q7m7-mp28	<0.20250813.083541-r14
L CVE-2026-42507	<0.20250813.083541-r14
M Cross-site Scripting (XSS)	<0.20250813.083541-r12
L Improper Encoding or Escaping of Output	<0.20250813.083541-r13
L CVE-2026-42501	<0.20250813.083541-r13
L GHSA-5m4p-2gjx-p2g8	<0.20250813.083541-r13
L GHSA-3v2c-x6q9-f697	<0.20250813.083541-r13
L GHSA-qf3q-3h68-mmh2	<0.20250813.083541-r13
L GHSA-497x-jcxf-m478	<0.20250813.083541-r13
L GHSA-8g2r-hhvj-mv99	<0.20250813.083541-r13
H Double Free	<0.20250813.083541-r13
L GHSA-2283-wf8c-rw8r	<0.20250813.083541-r13
L Cross-site Scripting (XSS)	<0.20250813.083541-r13
M Link Following	<0.20250813.083541-r13
L GHSA-qc64-m6c2-v4x7	<0.20250813.083541-r13
H NULL Pointer Dereference	<0.20250813.083541-r13
M Out-of-bounds Write	<0.20250813.083541-r13
L GHSA-fw8g-cg8f-9j28	<0.20250813.083541-r12
M Cross-site Scripting (XSS)	<0.20250813.083541-r11
L GHSA-vffh-x6r8-xx99	<0.20250813.083541-r11
L CVE-2026-32280	<0.20250813.083541-r13
L GHSA-m4pr-4j3g-9v7v	<0.20250813.083541-r13
M Cross-site Scripting (XSS)	<0.20250813.083541-r13
L GHSA-jrg3-gfjw-hm96	<0.20250813.083541-r13
L GHSA-gjvh-7jh8-7xhm	<0.20250813.083541-r13
L GHSA-7mr4-xjxg-34g6	<0.20250813.083541-r13
H Allocation of Resources Without Limits or Throttling	<0.20250813.083541-r13
H Improper Certificate Validation	<0.20250813.083541-r13
L GHSA-5w89-2c2x-6x66	<0.20250813.083541-r13
H Incorrect Authorization	<0.20250813.083541-r13
L Improper Authorization	<0.20250813.083541-r9
L GHSA-p77j-4mvh-x3m3	<0.20250813.083541-r9
L Directory Traversal	<0.20250813.083541-r8
L GHSA-j4j7-vw47-rhfq	<0.20250813.083541-r8
L GHSA-rv83-g57w-fr8j	<0.20250813.083541-r8
L GHSA-j3gx-2473-5fp8	<0.20250813.083541-r8
L Direct Request ('Forced Browsing')	<0.20250813.083541-r8
L Cross-site Scripting (XSS)	<0.20250813.083541-r8
L GHSA-8jvr-vh7g-f8gx	<0.20250813.083541-r6
C CVE-2025-68121	<0.20250813.083541-r6
L CVE-2025-61732	<0.20250813.083541-r6
L GHSA-h355-32pf-p2xm	<0.20250813.083541-r6
L GHSA-hcg3-q754-cr77	<0.20250221.160046-r1
L CVE-2025-47914	<0.20250813.083541-r3
L GHSA-j5w8-q4qc-rx2x	<0.20250813.083541-r3
L CVE-2025-58181	<0.20250813.083541-r3
L GHSA-f6x5-jh6r-wrfv	<0.20250813.083541-r3
L Algorithmic Complexity	<0.20250813.083541-r2
L CVE-2025-58186	<0.20250813.083541-r2
L Allocation of Resources Without Limits or Throttling	<0.20250813.083541-r2
L CVE-2025-58183	<0.20250813.083541-r2
L CVE-2025-47912	<0.20250813.083541-r2
L Allocation of Resources Without Limits or Throttling	<0.20250813.083541-r2
L Information Exposure Through Log Files	<0.20250813.083541-r2
L CVE-2025-61725	<0.20250813.083541-r2
L Allocation of Resources Without Limits or Throttling	<0.20250813.083541-r2
L Improper Certificate Validation	<0.20250813.083541-r2
L GHSA-62jj-gr2r-5c34	<0.20250521.015954-r2
L GHSA-6f52-wpx2-hvf2	<0.20250521.015954-r2
L CVE-2025-4673	<0.20250521.015954-r2
L CVE-2025-22874	<0.20250521.015954-r2
L CVE-2025-22872	<0.20250408.153949-r1
L Asymmetric Resource Consumption (Amplification)	<0.20250312.172924-r1
L CVE-2025-22869	<0.20250221.160046-r1
L CVE-2025-22866	<0.20250208.191421-r0
L CVE-2024-45336	<0.20250117.232550-r0
L CVE-2024-45341	<0.20250117.232550-r0
L CVE-2024-45338	<0.20241121.172154-r1
L CVE-2024-45337	<0.20241117.193525-r1
L Improper Handling of Exceptional Conditions	<0.20241029.153459-r1
L CVE-2024-34155	<0.20240131.085940-r10
L CVE-2024-34158	<0.20240131.085940-r10
L CVE-2024-34156	<0.20240131.085940-r10
L CVE-2024-24791	<0.20240131.085940-r9
M CVE-2024-24789	<0.20240131.085940-r8
C CVE-2024-24790	<0.20240131.085940-r8
L CVE-2024-24787	<0.20240131.085940-r6
L CVE-2024-24788	<0.20240131.085940-r6
L CVE-2023-45288	<0.20240131.085940-r5
L CVE-2024-24786	<0.20240131.085940-r2
L CVE-2024-28122	<0.20240131.085940-r2
L CVE-2024-24784	<0.20240131.085940-r1
L CVE-2023-45290	<0.20240131.085940-r1
L CVE-2023-45289	<0.20240131.085940-r1
L CVE-2024-24783	<0.20240131.085940-r1
L CVE-2024-24785	<0.20240131.085940-r1

Vulnerability

Vulnerable Version

CVE-2026-111943

<0.20250813.083541-r30

GHSA-hq7w-2xrq-wp2j

<0.20250813.083541-r26

CVE-2026-94448

<0.20250813.083541-r26

CVE-2026-78663

<0.20250813.083541-r27

CVE-2026-97030

<0.20250813.083541-r26

CVE-2026-78669

<0.20250813.083541-r27

CVE-2026-78659

<0.20250813.083541-r27

CVE-2026-94440

<0.20250813.083541-r26

GHSA-22jx-p735-qcpm

<0.20250813.083541-r26

CVE-2026-94439

<0.20250813.083541-r26

GHSA-f5vf-8pvc-394g

<0.20250813.083541-r26

GHSA-874m-fcc5-9gqf

<0.20250813.083541-r26

CVE-2026-56866

<0.20250813.083541-r26

GHSA-wpfx-qch4-q5j2

<0.20250813.083541-r26

CVE-2026-97032

<0.20250813.083541-r27

GHSA-2gfw-j3c5-j46w

<0.20250813.083541-r26

CVE-2026-97031

<0.20250813.083541-r26

GHSA-2v4p-qf9q-27wj

<0.20250813.083541-r25

Improper Validation of Array Index

<0.20250813.083541-r25

GHSA-vp52-pcj8-j9qc

<0.20250813.083541-r23

Resource Exhaustion

<0.20250813.083541-r23

GHSA-25mv-j2qr-v5jq

<0.20250813.083541-r20

CVE-2026-56860

<0.20250813.083541-r20

GHSA-xphw-4f88-5f39

<0.20250813.083541-r20

GHSA-xc2p-8ggw-6cr5

<0.20250813.083541-r20

GHSA-c974-w86c-vpfw

<0.20250813.083541-r20

GHSA-76p8-fhrm-vpc7

<0.20250813.083541-r20

GHSA-7qch-w8m5-g3h3

<0.20250813.083541-r20

CVE-2026-33818

<0.20250813.083541-r20

CVE-2026-56853

<0.20250813.083541-r20

CVE-2026-56859

<0.20250813.083541-r20

CVE-2026-56862

<0.20250813.083541-r20

CVE-2026-56858

<0.20250813.083541-r20

GHSA-jpjm-c3r5-q96r

<0.20250813.083541-r18

CVE-2026-56852

<0.20250813.083541-r18

GHSA-hrxh-6v49-42gf

<0.20250813.083541-r17

GHSA-wg65-39gg-5wfj

<0.20250813.083541-r16

Information Exposure

<0.20250813.083541-r16

Resource Exhaustion

<0.20250813.083541-r16

GHSA-8rm2-7qqf-34qm

<0.20250813.083541-r16

GHSA-ff52-ph69-cf7x

<0.20250813.083541-r16

CVE-2026-42505

<0.20250813.083541-r16

CVE-2026-27145

<0.20250813.083541-r14

GHSA-4279-q6mj-392r

<0.20250813.083541-r14

GHSA-h3gm-q7m7-mp28

<0.20250813.083541-r14

CVE-2026-42507

<0.20250813.083541-r14

Cross-site Scripting (XSS)

<0.20250813.083541-r12

Improper Encoding or Escaping of Output

<0.20250813.083541-r13

CVE-2026-42501

<0.20250813.083541-r13

GHSA-5m4p-2gjx-p2g8

<0.20250813.083541-r13

GHSA-3v2c-x6q9-f697

<0.20250813.083541-r13

GHSA-qf3q-3h68-mmh2

<0.20250813.083541-r13

GHSA-497x-jcxf-m478

<0.20250813.083541-r13

GHSA-8g2r-hhvj-mv99

<0.20250813.083541-r13

Double Free

<0.20250813.083541-r13

GHSA-2283-wf8c-rw8r

<0.20250813.083541-r13

Cross-site Scripting (XSS)

<0.20250813.083541-r13

Link Following

<0.20250813.083541-r13

GHSA-qc64-m6c2-v4x7

<0.20250813.083541-r13

NULL Pointer Dereference

<0.20250813.083541-r13

Out-of-bounds Write

<0.20250813.083541-r13

GHSA-fw8g-cg8f-9j28

<0.20250813.083541-r12

Cross-site Scripting (XSS)

<0.20250813.083541-r11

GHSA-vffh-x6r8-xx99

<0.20250813.083541-r11

CVE-2026-32280

<0.20250813.083541-r13

GHSA-m4pr-4j3g-9v7v

<0.20250813.083541-r13

Cross-site Scripting (XSS)

<0.20250813.083541-r13

GHSA-jrg3-gfjw-hm96

<0.20250813.083541-r13

GHSA-gjvh-7jh8-7xhm

<0.20250813.083541-r13

GHSA-7mr4-xjxg-34g6

<0.20250813.083541-r13

Allocation of Resources Without Limits or Throttling

<0.20250813.083541-r13

Improper Certificate Validation

<0.20250813.083541-r13

GHSA-5w89-2c2x-6x66

<0.20250813.083541-r13

Incorrect Authorization

<0.20250813.083541-r13

Improper Authorization

<0.20250813.083541-r9

GHSA-p77j-4mvh-x3m3

<0.20250813.083541-r9

Directory Traversal

<0.20250813.083541-r8

GHSA-j4j7-vw47-rhfq

<0.20250813.083541-r8

GHSA-rv83-g57w-fr8j

<0.20250813.083541-r8

GHSA-j3gx-2473-5fp8

<0.20250813.083541-r8

Direct Request ('Forced Browsing')

<0.20250813.083541-r8

Cross-site Scripting (XSS)

<0.20250813.083541-r8

GHSA-8jvr-vh7g-f8gx

<0.20250813.083541-r6

CVE-2025-68121

<0.20250813.083541-r6

CVE-2025-61732

<0.20250813.083541-r6

GHSA-h355-32pf-p2xm

<0.20250813.083541-r6

GHSA-hcg3-q754-cr77

<0.20250221.160046-r1

CVE-2025-47914

<0.20250813.083541-r3

GHSA-j5w8-q4qc-rx2x

<0.20250813.083541-r3

CVE-2025-58181

<0.20250813.083541-r3

GHSA-f6x5-jh6r-wrfv

<0.20250813.083541-r3

Algorithmic Complexity

<0.20250813.083541-r2

CVE-2025-58186

<0.20250813.083541-r2

Allocation of Resources Without Limits or Throttling

<0.20250813.083541-r2

CVE-2025-58183

<0.20250813.083541-r2

CVE-2025-47912

<0.20250813.083541-r2

Allocation of Resources Without Limits or Throttling

<0.20250813.083541-r2

Information Exposure Through Log Files

<0.20250813.083541-r2

CVE-2025-61725

<0.20250813.083541-r2

Allocation of Resources Without Limits or Throttling

<0.20250813.083541-r2

Improper Certificate Validation

<0.20250813.083541-r2

GHSA-62jj-gr2r-5c34

<0.20250521.015954-r2

GHSA-6f52-wpx2-hvf2

<0.20250521.015954-r2

CVE-2025-4673

<0.20250521.015954-r2

CVE-2025-22874

<0.20250521.015954-r2

CVE-2025-22872

<0.20250408.153949-r1

Asymmetric Resource Consumption (Amplification)

<0.20250312.172924-r1

CVE-2025-22869

<0.20250221.160046-r1

CVE-2025-22866

<0.20250208.191421-r0

CVE-2024-45336

<0.20250117.232550-r0

CVE-2024-45341

<0.20250117.232550-r0

CVE-2024-45338

<0.20241121.172154-r1

CVE-2024-45337

<0.20241117.193525-r1

Improper Handling of Exceptional Conditions

<0.20241029.153459-r1

CVE-2024-34155

<0.20240131.085940-r10

CVE-2024-34158

<0.20240131.085940-r10

CVE-2024-34156

<0.20240131.085940-r10

CVE-2024-24791

<0.20240131.085940-r9

CVE-2024-24789

<0.20240131.085940-r8

CVE-2024-24790

<0.20240131.085940-r8

CVE-2024-24787

<0.20240131.085940-r6

CVE-2024-24788

<0.20240131.085940-r6

CVE-2023-45288

<0.20240131.085940-r5

CVE-2024-24786

<0.20240131.085940-r2

CVE-2024-28122

<0.20240131.085940-r2

CVE-2024-24784

<0.20240131.085940-r1

CVE-2023-45290

<0.20240131.085940-r1

CVE-2023-45289

<0.20240131.085940-r1

CVE-2024-24783

<0.20240131.085940-r1

CVE-2024-24785

<0.20240131.085940-r1