neuvector-sigstore-interface-fips

Direct Vulnerabilities

Known vulnerabilities in the neuvector-sigstore-interface-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-97030	<4.301-r1
L GHSA-wpfx-qch4-q5j2	<4.301-r1
L CVE-2026-97031	<4.301-r1
L CVE-2026-78669	<4.301-r2
L CVE-2026-94440	<4.301-r1
L GHSA-2gfw-j3c5-j46w	<4.301-r1
L CVE-2026-94439	<4.301-r1
L CVE-2026-94448	<4.301-r1
L GHSA-hq7w-2xrq-wp2j	<4.301-r1
L CVE-2026-97032	<4.301-r2
L CVE-2026-56866	<4.301-r1
L CVE-2026-78660	<4.301-r2
L CVE-2026-78663	<4.301-r2
L GHSA-22jx-p735-qcpm	<4.301-r1
L GHSA-f5vf-8pvc-394g	<4.301-r1
L GHSA-874m-fcc5-9gqf	<4.301-r1
L CVE-2026-78659	<4.301-r2
L GHSA-8wmf-6v46-5gfg	<4.292-r1
L Information Exposure	<4.292-r1
L GHSA-2v4p-qf9q-27wj	<4.274-r1
L Improper Validation of Array Index	<4.274-r1
L GHSA-vp52-pcj8-j9qc	<4.270-r0
L Resource Exhaustion	<4.270-r0
L GHSA-xc2p-8ggw-6cr5	<0_git20260617-r13
L GHSA-7qch-w8m5-g3h3	<0_git20260617-r13
L GHSA-76p8-fhrm-vpc7	<0_git20260617-r13
L CVE-2026-56860	<0_git20260617-r13
L GHSA-25mv-j2qr-v5jq	<0_git20260617-r13
L CVE-2026-33818	<0_git20260617-r13
L CVE-2026-56859	<0_git20260617-r13
L GHSA-c974-w86c-vpfw	<0_git20260617-r13
L CVE-2026-56858	<0_git20260617-r13
L CVE-2026-56862	<0_git20260617-r13
L Use of a Key Past its Expiration Date	<0_git20260617-r11
L GHSA-wqqc-jjcq-vfxm	<0_git20260617-r11
L CVE-2026-56852	<0_git20260617-r10
L GHSA-jpjm-c3r5-q96r	<0_git20260617-r10
L GHSA-hrxh-6v49-42gf	<0_git20260617-r9
H Improper Verification of Cryptographic Signature	<0_git20260617-r7
L GHSA-9vcr-p3rj-q5q6	<0_git20260617-r7
L CVE-2026-42505	<0_git20260617-r6
L GHSA-ff52-ph69-cf7x	<0_git20260617-r6
H Allocation of Resources Without Limits or Throttling	<0_git20260617-r4
L GHSA-9c54-x2g4-v92j	<0_git20260617-r4
L Allocation of Resources Without Limits or Throttling	<0_git20260617-r3
L GHSA-47q9-m4ww-924m	<0_git20260617-r3
L GHSA-q4h4-gmj2-qvw2	<0_git20260429-r4
L GHSA-rm3j-f69w-wqmq	<0_git20260429-r4
L GHSA-89gr-r52h-f8rx	<0_git20260429-r4
L GHSA-5wrp-cwcj-q835	<0_git20260617-r2
L GHSA-w879-237q-wc7r	<0_git20260429-r4
L Uncontrolled Memory Allocation	<0_git20260617-r2
H Untrusted Search Path	<0_git20260617-r1
L GHSA-hfvc-g4fc-pqhx	<0_git20260617-r1
L CVE-2026-39821	<0_git20260429-r6
L GHSA-w2q5-6q6x-x959	<0_git20260429-r6
L Missing Authorization	<0_git20260429-r4
L Integer Overflow or Wraparound	<0_git20260429-r4
L Incorrect Type Conversion or Cast	<0_git20260429-r4
L Improper Verification of Cryptographic Signature	<0_git20260429-r4
L GHSA-pmwq-pjrm-6p5r	<0_git20260429-r2
L GHSA-p9h5-jm8x-mjm5	<0_git20260429-r1
L GHSA-xq5j-9r39-c3vf	<0_git20260429-r1
L GHSA-5m4p-2gjx-p2g8	<0_git20260429-r1
L GHSA-3v2c-x6q9-f697	<0_git20260429-r1
L CVE-2026-42501	<0_git20260429-r1
L GHSA-8g2r-hhvj-mv99	<0_git20260429-r1
L GHSA-497x-jcxf-m478	<0_git20260429-r1
L GHSA-qc64-m6c2-v4x7	<0_git20260429-r1
M Link Following	<0_git20260429-r1
L CVE-2026-42499	<0_git20260429-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0_git20260429-r1
L GHSA-2283-wf8c-rw8r	<0_git20260429-r1
L Cross-site Scripting (XSS)	<0_git20260429-r1
H Double Free	<0_git20260429-r1
H Allocation of Resources Without Limits or Throttling	<0_git20260429-r1
L GHSA-qf3q-3h68-mmh2	<0_git20260429-r1
M Out-of-bounds Write	<0_git20260429-r1
L Improper Encoding or Escaping of Output	<0_git20260429-r1
H NULL Pointer Dereference	<0_git20260429-r1
L GHSA-gjvh-7jh8-7xhm	<0_git20260429-r4
L GHSA-7mr4-xjxg-34g6	<0_git20260429-r4
H Improper Certificate Validation	<0_git20260429-r4
L GHSA-5w89-2c2x-6x66	<0_git20260429-r4
H Allocation of Resources Without Limits or Throttling	<0_git20260429-r4
L CVE-2026-32280	<0_git20260429-r4
L GHSA-jrg3-gfjw-hm96	<0_git20260429-r4
L GHSA-m4pr-4j3g-9v7v	<0_git20260429-r4
H Incorrect Authorization	<0_git20260429-r4
M Cross-site Scripting (XSS)	<0_git20260429-r4
L Uncaught Exception	<0_git20260405-r0
L GHSA-78h2-9frx-2jm8	<0_git20260405-r0
L CVE-2026-27141	<0_git20260326-r1
L GHSA-8fj7-8h3w-xwfm	<0_git20260326-r1
L Improper Authorization	<0_git20260325-r0
L GHSA-p77j-4mvh-x3m3	<0_git20260325-r0
L Cross-site Scripting (XSS)	<0_git20260306-r1
L GHSA-j4j7-vw47-rhfq	<0_git20260306-r1
L Directory Traversal	<0_git20260306-r1
L GHSA-j3gx-2473-5fp8	<0_git20260306-r1
L GHSA-rv83-g57w-fr8j	<0_git20260306-r1
L Direct Request ('Forced Browsing')	<0_git20260306-r1
L GHSA-p436-gjf2-799p	<0_git20260306-r0
H CVE-2025-15558	<0_git20260306-r0
L GHSA-8jvr-vh7g-f8gx	<0_git20260210-r0
L CVE-2025-61732	<0_git20260210-r0
C CVE-2025-68121	<0_git20260210-r0
L GHSA-h355-32pf-p2xm	<0_git20260210-r0
H Reachable Assertion	<0_git20260130-r0
L Directory Traversal	<0_git20260130-r0
L GHSA-fphv-w9fq-2525	<0_git20260130-r0
L GHSA-jqc5-w2xx-5vq4	<0_git20260130-r0
L NULL Pointer Dereference	<0_git20260130-r0
M Directory Traversal	<0_git20260130-r0
L GHSA-273p-m2cw-6833	<0_git20260130-r0
L GHSA-4c4x-jm2x-pf9j	<0_git20260130-r0
L GHSA-846p-jg2w-w324	<0_git20260130-r0
L Server-Side Request Forgery (SSRF)	<0_git20260130-r0
H Improper Verification of Cryptographic Signature	<0_git20260130-r0
L GHSA-fcv2-xgw5-pqxf	<0_git20260130-r0
M Information Exposure	<0_git20250825-r0
L GHSA-hcg3-q754-cr77	<0_git20250207-r1
L Improper Validation of Specified Type of Input	<0_git20250612-r0
L Race Condition	<0_git20251020-r1
L GHSA-6v2p-p543-phr9	<0_git20250207-r2
L GHSA-4f8r-qqr9-fq8j	<0_git20251020-r1
L GHSA-4qg8-fj49-pxjh	<0_git20251212-r0
L Asymmetric Resource Consumption (Amplification)	<0_git20251212-r0
L GHSA-7c64-f9jr-v9h2	<0_git20251126-r1
L Improper Certificate Validation	<0_git20251126-r1
L CVE-2025-58181	<0_git20251117-r1
L GHSA-j5w8-q4qc-rx2x	<0_git20251117-r1
L GHSA-2464-8j7c-4cjm	<0_git20250825-r0
L GHSA-fv92-fjc5-jj9h	<0_git20250630-r0
L CVE-2025-22870	<0_git20250207-r3
L CVE-2025-22868	<0_git20250207-r2
L CVE-2025-22869	<0_git20250207-r1
L CVE-2025-22866	<0_git20250207-r0
L CVE-2024-45341	<0_git20240801-r5
L CVE-2024-45336	<0_git20240801-r5
L CVE-2024-45338	<0_git20240801-r4
L CVE-2024-45337	<0_git20240801-r3
L CVE-2024-34156	<0_git20240801-r2
L CVE-2024-34158	<0_git20240801-r2
L CVE-2024-34155	<0_git20240801-r2
L CVE-2024-41110	<0_git20240801-r0
L CVE-2024-24791	<0_git20240605-r1
M Information Exposure Through Log Files	<0_git20240605-r0
C CVE-2024-24790	<0_git20240520-r1
M CVE-2024-24789	<0_git20240520-r1

Vulnerability

Vulnerable Version

<4.301-r1

<4.301-r1

<4.301-r1

<4.301-r2

<4.301-r1

<4.301-r1

<4.301-r1

<4.301-r1

<4.301-r1

<4.301-r2

<4.301-r1

<4.301-r2

<4.301-r2

<4.301-r1

<4.301-r1

<4.301-r1

<4.301-r2

<4.292-r1

<4.292-r1

<4.274-r1

Improper Validation of Array Index

<4.274-r1

<4.270-r0

<4.270-r0

<0_git20260617-r13

<0_git20260617-r13

<0_git20260617-r13

<0_git20260617-r13

<0_git20260617-r13

<0_git20260617-r13

<0_git20260617-r13

<0_git20260617-r13

<0_git20260617-r13

<0_git20260617-r13

Use of a Key Past its Expiration Date

<0_git20260617-r11

<0_git20260617-r11

<0_git20260617-r10

<0_git20260617-r10

<0_git20260617-r9

Improper Verification of Cryptographic Signature

<0_git20260617-r7

GHSA-9vcr-p3rj-q5q6

<0_git20260617-r7

CVE-2026-42505

<0_git20260617-r6

GHSA-ff52-ph69-cf7x

<0_git20260617-r6

Allocation of Resources Without Limits or Throttling

<0_git20260617-r4

GHSA-9c54-x2g4-v92j

<0_git20260617-r4

Allocation of Resources Without Limits or Throttling

<0_git20260617-r3

<0_git20260617-r3

<0_git20260429-r4

<0_git20260429-r4

<0_git20260429-r4

<0_git20260617-r2

<0_git20260429-r4

Uncontrolled Memory Allocation

<0_git20260617-r2

Untrusted Search Path

<0_git20260617-r1

GHSA-hfvc-g4fc-pqhx

<0_git20260617-r1

CVE-2026-39821

<0_git20260429-r6

GHSA-w2q5-6q6x-x959

<0_git20260429-r6

Missing Authorization

<0_git20260429-r4

Integer Overflow or Wraparound

<0_git20260429-r4

Incorrect Type Conversion or Cast

<0_git20260429-r4

Improper Verification of Cryptographic Signature

<0_git20260429-r4

<0_git20260429-r2

<0_git20260429-r1

<0_git20260429-r1

<0_git20260429-r1

<0_git20260429-r1

<0_git20260429-r1

<0_git20260429-r1

<0_git20260429-r1

<0_git20260429-r1

<0_git20260429-r1

<0_git20260429-r1

Loop with Unreachable Exit Condition ('Infinite Loop')

<0_git20260429-r1

GHSA-2283-wf8c-rw8r

<0_git20260429-r1

Cross-site Scripting (XSS)

<0_git20260429-r1

Double Free

<0_git20260429-r1

Allocation of Resources Without Limits or Throttling

<0_git20260429-r1

GHSA-qf3q-3h68-mmh2

<0_git20260429-r1

Out-of-bounds Write

<0_git20260429-r1

Improper Encoding or Escaping of Output

<0_git20260429-r1

NULL Pointer Dereference

<0_git20260429-r1

GHSA-gjvh-7jh8-7xhm

<0_git20260429-r4

GHSA-7mr4-xjxg-34g6

<0_git20260429-r4

Improper Certificate Validation

<0_git20260429-r4

GHSA-5w89-2c2x-6x66

<0_git20260429-r4

Allocation of Resources Without Limits or Throttling

<0_git20260429-r4

CVE-2026-32280

<0_git20260429-r4

GHSA-jrg3-gfjw-hm96

<0_git20260429-r4

GHSA-m4pr-4j3g-9v7v

<0_git20260429-r4

Incorrect Authorization

<0_git20260429-r4

Cross-site Scripting (XSS)

<0_git20260429-r4

<0_git20260405-r0

<0_git20260405-r0

<0_git20260326-r1

<0_git20260326-r1

Improper Authorization

<0_git20260325-r0

GHSA-p77j-4mvh-x3m3

<0_git20260325-r0

Cross-site Scripting (XSS)

<0_git20260306-r1

<0_git20260306-r1

<0_git20260306-r1

<0_git20260306-r1

<0_git20260306-r1

Direct Request ('Forced Browsing')

<0_git20260306-r1

<0_git20260306-r0

<0_git20260306-r0

<0_git20260210-r0

<0_git20260210-r0

<0_git20260210-r0

<0_git20260210-r0

<0_git20260130-r0

<0_git20260130-r0

<0_git20260130-r0

<0_git20260130-r0

NULL Pointer Dereference

<0_git20260130-r0

<0_git20260130-r0

<0_git20260130-r0

<0_git20260130-r0

<0_git20260130-r0

Server-Side Request Forgery (SSRF)

<0_git20260130-r0

Improper Verification of Cryptographic Signature

<0_git20260130-r0

GHSA-fcv2-xgw5-pqxf

<0_git20260130-r0

Information Exposure

<0_git20250825-r0

GHSA-hcg3-q754-cr77

<0_git20250207-r1

Improper Validation of Specified Type of Input

<0_git20250612-r0

<0_git20251020-r1

<0_git20250207-r2

<0_git20251020-r1

<0_git20251212-r0

Asymmetric Resource Consumption (Amplification)

<0_git20251212-r0

GHSA-7c64-f9jr-v9h2

<0_git20251126-r1

Improper Certificate Validation

<0_git20251126-r1

<0_git20251117-r1

<0_git20251117-r1

<0_git20250825-r0

<0_git20250630-r0

<0_git20250207-r3

<0_git20250207-r2

<0_git20250207-r1

<0_git20250207-r0

<0_git20240801-r5

<0_git20240801-r5

<0_git20240801-r4

<0_git20240801-r3

<0_git20240801-r2

<0_git20240801-r2

<0_git20240801-r2

<0_git20240801-r0

<0_git20240605-r1

Information Exposure Through Log Files

<0_git20240605-r0

CVE-2024-24790

<0_git20240520-r1

CVE-2024-24789

<0_git20240520-r1