spire-server vulnerabilities

Known vulnerabilities in the spire-server package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L GHSA-62jj-gr2r-5c34	<1.12.2-r1
L GHSA-6f52-wpx2-hvf2	<1.12.2-r1
L CVE-2025-22874	<1.12.2-r1
L CVE-2025-4673	<1.12.2-r1
L Arbitrary Code Injection	<1.12.0-r3
L GHSA-6m8w-jc87-6cr7	<1.12.0-r3
L CVE-2025-22872	<1.12.0-r2
L GHSA-vvgc-356p-c3xw	<1.12.0-r2
L GHSA-g9pc-8g42-g6vq	<1.12.0-r1
L CVE-2025-22871	<1.12.0-r1
L GHSA-mh63-6h87-95cp	<1.12.0-r0
L Asymmetric Resource Consumption (Amplification)	<1.12.0-r0
L CVE-2024-34158	<1.11.2-r5
L GHSA-j7vj-rw65-4v26	<1.11.2-r5
L GHSA-33c5-9fx5-fvjm	<1.11.2-r5
L CVE-2024-34155	<1.11.2-r5
H Authentication Bypass	<1.11.2-r5
L GHSA-8xfx-rj4p-23jm	<1.11.2-r5
L GHSA-xr7q-jx4m-x55m	<1.11.2-r5
L GHSA-crqm-pwhx-j97f	<1.11.2-r5
L GHSA-29qp-crvh-w22m	<1.11.2-r5
M Open Redirect	<1.11.2-r5
L CVE-2024-34156	<1.11.2-r5
L GHSA-c77r-fh37-x2px	<1.11.2-r5
L CVE-2025-22870	<1.11.2-r5
L GHSA-qxp5-gwg8-xv66	<1.11.2-r5
L CVE-2025-22868	<1.11.2-r4
L CVE-2025-22869	<1.11.2-r3
L Allocation of Resources Without Limits or Throttling	<1.11.2-r2
L GHSA-c6gw-w398-hv78	<1.11.2-r2
L CVE-2025-22866	<1.11.1-r3
L GHSA-3whm-j4xm-rv8x	<1.11.1-r3
L GHSA-7wrw-r4p8-38rx	<1.11.1-r2
L CVE-2024-45336	<1.11.1-r2
L GHSA-3f6r-qh9c-x6mm	<1.11.1-r2
L CVE-2024-45341	<1.11.1-r2
L CVE-2024-45338	<1.11.1-r1
L GHSA-w32m-9786-jp63	<1.11.1-r1
L CVE-2024-45337	<1.11.1-r0
L GHSA-v778-237x-gjrc	<1.11.1-r0
M Information Exposure Through Log Files	<1.10.0-r1
L GHSA-v6v8-xj6m-xwqh	<1.10.0-r1
M Race Condition	<1.9.6-r2
L GHSA-m5vv-6r4h-3vj9	<1.9.6-r2
L GHSA-49gw-vxvf-fc2g	<1.9.6-r1
C CVE-2024-24790	<1.9.6-r1
L GHSA-236w-p7wf-5ph8	<1.9.6-r1
M CVE-2024-24789	<1.9.6-r1
H Allocation of Resources Without Limits or Throttling	<1.9.4-r1
M Allocation of Resources Without Limits or Throttling	<1.9.4-r1
L GHSA-95pr-fxf5-86gv	<1.9.4-r1
L GHSA-88jx-383q-w4qc	<1.9.4-r1
L GHSA-4v7x-pqxf-cx7m	<1.9.4-r0
L CVE-2023-45288	<1.9.4-r0
L GHSA-mq39-4gv4-mvpx	<1.9.1-r4
H Incorrect Resource Transfer Between Spheres	<1.9.1-r4
L GHSA-8r3f-844c-mc37	<1.9.1-r3
L CVE-2024-24786	<1.9.1-r3
L CVE-2024-28122	<1.9.1-r2
L GHSA-hj3v-m684-v259	<1.9.1-r2
L CVE-2024-28180	<1.9.1-r1
L GHSA-c5q2-7r4c-mv6g	<1.9.1-r1
L GHSA-pvcr-v8j8-j5q3	<1.8.7-r2
L GHSA-9763-4f94-gfch	<1.8.7-r1
H NULL Pointer Dereference	<1.8.7-r2
L GHSA-45x7-px36-x8w8	<1.8.6-r1
M Improper Validation of Integrity Check Value	<1.8.6-r1
L GHSA-vfp6-jrw2-99g9	<1.8.4-r1
L GHSA-2c7c-3mj9-8fqh	<1.8.4-r2
M Loop with Unreachable Exit Condition ('Infinite Loop')	<1.8.4-r1

Vulnerability

Vulnerable Version

<1.12.2-r1

<1.12.2-r1

<1.12.2-r1

<1.12.2-r1

Arbitrary Code Injection

<1.12.0-r3