nessie-fips

Direct Vulnerabilities

Known vulnerabilities in the nessie-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Improper Access Control	<0.108.2-r0
L Incorrect Authorization	<0.108.8-r0
H Information Exposure Through Caching	<0.108.8-r0
H Algorithmic Complexity	<0.108.8-r0
C Improper Check for Unusual or Exceptional Conditions	<0.108.8-r0
L Insufficiently Protected Credentials	<0.108.2-r0
L Inappropriate Encoding for Output Context	<0.108.2-r0
L Cleartext Transmission of Sensitive Information	<0.108.2-r0
L CVE-2026-40984	<0.108.1-r0
L CVE-2026-40983	<0.108.1-r0
L Resource Exhaustion	<0.108.4-r0
H HTTP Request Smuggling	<0.108.4-r0
H Resource Exhaustion	<0.108.4-r0
M HTTP Request Smuggling	<0.108.4-r0
M CRLF Injection	<0.108.4-r0
L Improper Access Control	<0.108.4-r0
L CRLF Injection	<0.108.4-r0
H Allocation of Resources Without Limits or Throttling	<0.108.4-r0
L Resource Exhaustion	<0.108.4-r0
L Resource Exhaustion	<0.108.4-r0
H Resource Exhaustion	<0.108.4-r0
L GHSA-mfg7-5gfp-c4w3	<0.108.4-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0.108.4-r0
L Improper Authentication	<0.108.1-r0
L Not Failing Securely ('Failing Open')	<0.108.2-r0
L GHSA-mhm7-754m-9p8w	<0.108.1-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<0.108.1-r0