datahub-frontend-react-fips

Direct Vulnerabilities

Known vulnerabilities in the datahub-frontend-react-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-54399	<1.7.0.1-r0
L CVE-2026-40983	<1.7.0.1-r0
L CVE-2026-40984	<1.7.0.1-r0
L CVE-2026-54428	<1.7.0.1-r0
H Information Exposure Through Caching	<1.7.0.1-r0
L CVE-2026-9828	<1.7.0.1-r0
L CVE-2026-41001	<1.7.0.1-r0
C Improper Check for Unusual or Exceptional Conditions	<1.7.0.1-r0
L CVE-2026-10532	<1.7.0.1-r0
H Algorithmic Complexity	<1.7.0.1-r0
L Missing Release of Resource after Effective Lifetime	<1.7.0.1-r0
L Improper Encoding or Escaping of Output	<1.7.0.1-r0
L Resource Exhaustion	<1.7.0.1-r0
M Memory Leak	<1.7.0-r0
M HTTP Request Smuggling	<1.7.0-r0
L CRLF Injection	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
C Improper Handling of Alternate Encoding	<1.7.0-r0
L Improper Access Control	<1.7.0-r0
L Use of Non-Canonical URL Paths for Authorization Decisions	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
M CVE-2026-41852	<1.7.0-r0
M Allocation of Resources Without Limits or Throttling	<1.7.0-r0
H Allocation of Resources Without Limits or Throttling	<1.7.0-r0
H CVE-2026-41851	<1.7.0-r0
L Information Exposure	<1.7.0-r0
H HTTP Request Smuggling	<1.7.0-r0
L GHSA-mfg7-5gfp-c4w3	<1.7.0-r0
L Improper Check for Certificate Revocation	<1.7.0-r0
M CVE-2026-43827	<1.7.0-r0
C XML External Entity (XXE) Injection	<1.7.0-r0
L Use of Insufficiently Random Values	<1.7.0-r0
H Resource Exhaustion	<1.7.0-r0
L Information Exposure	<1.7.0-r0
L Information Exposure	<1.7.0-r0
H CVE-2026-41848	<1.7.0-r0
M CRLF Injection	<1.7.0-r0
L GHSA-v74w-7mr3-4qg3	<1.7.0-r0
L CVE-2026-41850	<1.7.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.7.0-r0
L NULL Pointer Dereference	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
H Resource Exhaustion	<1.7.0-r0
L HTTP Request Smuggling	<1.7.0-r0
L CRLF Injection	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
L Improper Input Validation	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
L Time-of-check Time-of-use (TOCTOU)	<1.7.0-r0
H Resource Exhaustion	<1.7.0-r0
C Improper Certificate Validation	<1.7.0-r0
L Allocation of Resources Without Limits or Throttling	<1.7.0-r0
L Improper Check or Handling of Exceptional Conditions	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
L Improper Access Control	<1.7.0-r0
L Improper Verification of Source of a Communication Channel	<1.7.0-r0
L Allocation of Resources Without Limits or Throttling	<1.7.0-r0
L LDAP Injection	<1.7.0-r0
L Allocation of Resources Without Limits or Throttling	<1.7.0-r0
H Memory Leak	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
L Improper Verification of Cryptographic Signature	<1.7.0-r0
L Incomplete Blacklist	*
H Memory Leak	<1.7.0-r0
L Incomplete Blacklist	*
L Resource Exhaustion	<1.7.0-r0
L Resource Exhaustion	<1.7.0-r0
C Insufficient Verification of Data Authenticity	<1.7.0-r0
C Insufficient Verification of Data Authenticity	<1.7.0-r0

Vulnerability

Vulnerable Version

CVE-2026-54399

<1.7.0.1-r0