amazon-cloudwatch-agent-operator

Direct Vulnerabilities

Known vulnerabilities in the amazon-cloudwatch-agent-operator package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Improper Handling of Case Sensitivity	<3.8.0-r0
L CVE-2026-56854	<3.8.0-r0
L CVE-2026-111943	<3.8.0-r0
L Improper Validation of Array Index	<3.8.0-r0
L CVE-2026-56855	<3.8.0-r0
L Resource Exhaustion	<3.8.0-r0
L CVE-2026-78662	<3.8.0-r0
L CVE-2026-56851	<3.8.0-r0
L CVE-2026-94444	<3.7.0-r2
L CVE-2026-94447	<3.7.0-r2
L CVE-2026-56857	<3.7.0-r2
L CVE-2026-94440	<3.7.0-r2
L CVE-2026-78667	<3.7.0-r2
L CVE-2026-56866	<3.7.0-r2
L CVE-2026-94448	<3.7.0-r2
L CVE-2026-97031	<3.7.0-r2
L CVE-2026-94439	<3.7.0-r2
L CVE-2026-97030	<3.7.0-r2
L CVE-2026-56865	<3.7.0-r1
L CVE-2026-56864	<3.7.0-r1
L CVE-2026-56858	<3.7.0-r1
L CVE-2026-33818	<3.7.0-r1
L CVE-2026-56862	<3.7.0-r1
L CVE-2026-56860	<3.7.0-r1
L CVE-2026-56859	<3.7.0-r1
L CVE-2026-56853	<3.7.0-r1
L GHSA-hrxh-6v49-42gf	<3.7.0-r0
L CVE-2026-56852	<3.7.0-r0
L CVE-2026-46600	<3.6.0-r0
L Cross-site Scripting (XSS)	<3.6.0-r0
L Uncontrolled Memory Allocation	<3.6.0-r0
L CVE-2026-39822	<3.5.0-r2
L CVE-2026-42505	<3.5.0-r2
L Untrusted Search Path	<3.5.0-r0
L Uncontrolled Memory Allocation	<3.5.0-r0
H Untrusted Search Path	<3.5.0-r0
L Uncontrolled Search Path Element	<3.6.0-r0
H Symlink Following	<3.6.0-r0
H Off-by-one Error	<3.6.0-r0
L Missing Authorization	<3.5.0-r1
L Improper Certificate Validation	<3.5.0-r1
L CVE-2026-39824	<3.5.0-r1
L Improper Restriction of Rendered UI Layers or Frames	<3.5.0-r1
L Improper Certificate Validation	<3.5.0-r1
L Improper Certificate Validation	<3.5.0-r1
L Improper Restriction of Rendered UI Layers or Frames	<3.5.0-r1
L Resource Exhaustion	<3.5.0-r1
L Missing Authorization	<3.5.0-r1
L CVE-2026-39821	<3.5.0-r1
L Incorrect Type Conversion or Cast	<3.5.0-r1
L CVE-2026-46595	<3.5.0-r1
L Cross-site Scripting (XSS)	<3.5.0-r1
L Out-of-Bounds	<3.5.0-r1
L Improper Verification of Cryptographic Signature	<3.5.0-r1
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<3.5.0-r1
L Improper Restriction of Rendered UI Layers or Frames	<3.5.0-r1
L Integer Overflow or Wraparound	<3.5.0-r1
L CVE-2026-46598	<3.5.0-r1
L Deserialization of Untrusted Data	<3.5.0-r1
M Use of a Broken or Risky Cryptographic Algorithm	<3.5.0-r0
L Use of a Broken or Risky Cryptographic Algorithm	<3.5.0-r0
L CVE-2026-42507	<3.4.2-r2
H Authentication Bypass	<3.6.0-r0
L CVE-2026-42504	<3.4.2-r2
L CVE-2026-27145	<3.4.2-r2
M Cross-site Scripting (XSS)	<3.5.0-r0
L Resource Exhaustion	<3.5.0-r0
L Information Exposure	<3.5.0-r0
L Improper Encoding or Escaping of Output	<3.4.2-r1
H Allocation of Resources Without Limits or Throttling	<3.4.2-r1
M Out-of-bounds Write	<3.4.2-r1
H Double Free	<3.4.2-r1
L CVE-2026-42499	<3.4.2-r1
L CVE-2026-39825	<3.4.2-r1
H NULL Pointer Dereference	<3.4.2-r1
L Cross-site Scripting (XSS)	<3.4.2-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<3.4.2-r1
L CVE-2026-42501	<3.4.2-r1
M Link Following	<3.4.2-r1
M Cross-site Scripting (XSS)	<3.5.0-r0
L Allocation of Resources Without Limits or Throttling	<3.5.0-r0
L Improper Authorization	<3.3.3-r0

Vulnerability

Vulnerable Version

Improper Handling of Case Sensitivity

<3.8.0-r0