nova | Snyk

Direct Vulnerabilities

Known vulnerabilities in the nova package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Incorrect Resource Transfer Between Spheres	<2:33.0.1-4
L Incorrect Resource Transfer Between Spheres	<2:32.1.0-7
M Open Redirect	<2:23.0.2-3
M CVE-2023-2088	<2:26.1.0-4
M Information Exposure	<2:13.0.0-1
M Security Features	<1:12.0.0-2
L Resource Management Errors	<1:12.0.0-2
M Resource Management Errors	<2:13.1.0-1
M Information Exposure	<2013.2.1-1
M Information Exposure	<2014.1.1-8
M Cryptographic Issues	<2013.2.3-1
M Resource Management Errors	<2014.1.3-7
M Access Restriction Bypass	<2013.2.3-1
L Out-of-Bounds	<2013.2-1
L Resource Management Errors	<2:13.0.0-1
C Information Exposure Through Log Files	<2:14.0.0-4
M Access Restriction Bypass	<2012.1.1-2
L CVE-2022-37394	<2:26.0.0~rc1-3
M Access Restriction Bypass	<2012.1~rc1-1
M Information Exposure	<2012.1~e1-1
M Out-of-Bounds	<2012.1.1-13
H XML External Entity (XXE) Injection	<2:21.1.0-1
L Information Exposure	<2:13.0.0~rc3-1
L Resource Management Errors	<2014.1.3-1
L Access Restriction Bypass	<2014.1-9
L Resource Management Errors	<2014.1.3-6
M Resource Management Errors	<2013.2.2
M Access Restriction Bypass	<2013.1.2-3
L Incorrect Permission Assignment for Critical Resource	*
L Information Exposure	<2013.2.2
M Improper Input Validation	<2012.1-6
L Resource Management Errors	<2013.1.2-2
L Cryptographic Issues	<2013.1.2-3
M Resource Management Errors	<2012-1~rc3-1
L Information Exposure	<2:20.1.1-1
H Access Restriction Bypass	<2012.1.1-14
M Insufficient Verification of Data Authenticity	<2014.1.3-11
H Resource Exhaustion	<2:16.0.3-6
M Access Restriction Bypass	<2013.2.2
L Information Exposure	<2014.1.3-5
M Resource Management Errors	<2012.1.1-15
M Out-of-Bounds	<2013.1.3-1
M Access Restriction Bypass	<2012.1.1-6
M Directory Traversal	<2012.1.1-2
M Directory Traversal	<2012.1~e1-4
M CVE-2024-32498	<2:29.0.2-4
L Information Exposure	<2:19.0.2-1
M Access Restriction Bypass	<2014.1.1-4
H CVE-2017-18191	<2:17.0.0-1
L Information Exposure	<2013.2.2-4
M Access Restriction Bypass	<2013.2-1
L Resource Management Errors	<2013.2-3
M Directory Traversal	<2:26.0.0-6
L Improper Input Validation	<2012.1.1-5
L Access Restriction Bypass	<2012.1-2
M Information Exposure	<2:13.0.0~rc3-1
M CVE-2017-16239	<2:16.0.3-1
M Improper Access Control	<2014.1-1
L Resource Management Errors	<2013.2-3
L Access Restriction Bypass	<2013.1.3-1
M Resource Management Errors	<1:12.0.0-2
M Access Restriction Bypass	<2012.1.1-12
H Information Exposure	<2012.1~e1-1

Vulnerability

Vulnerable Version

Incorrect Resource Transfer Between Spheres

<2:33.0.1-4