paketo-buildpacks-passenger

Direct Vulnerabilities

Known vulnerabilities in the paketo-buildpacks-passenger package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-94447	*
L Improper Validation of Integrity Check Value	<0.14.23-r0
L CVE-2026-94444	*
L Improper Privilege Management	*
L Resource Exhaustion	*
L CVE-2026-78663	*
L CVE-2026-56866	*
L CVE-2026-94448	*
L CVE-2026-97030	*
L CVE-2026-97032	*
L CVE-2026-97031	*
L CVE-2026-94439	*
L Resource Exhaustion	<0.15.1-r0
L CVE-2026-78667	*
L CVE-2026-56857	*
L CVE-2026-78659	*
L CVE-2026-78660	*
L CVE-2026-94440	*
L CVE-2026-78669	*
L CVE-2026-56851	<0.15.7-r1
L Improper Handling of Unicode Encoding	<0.14.23-r0
L Resource Exhaustion	*
L Information Exposure	<0.15.7-r0
L Resource Exhaustion	*
L Improper Validation of Array Index	*
L Improper Handling of Case Sensitivity	*
L CVE-2026-56855	*
L CVE-2026-78662	*
L Resource Exhaustion	*
L CVE-2026-56854	<0.15.7-r1
L Race Condition	<0.15.7-r0
L CVE-2026-56860	<0.15.7-r1
L CVE-2026-56858	<0.15.7-r1
L CVE-2026-33818	<0.15.7-r1
L CVE-2026-56865	<0.15.7-r1
L CVE-2026-56862	<0.15.7-r1
L CVE-2026-56859	<0.15.7-r1
L CVE-2026-56853	<0.15.7-r1
L CVE-2026-56864	<0.15.7-r1
L GHSA-xmrv-pmrh-hhx2	*
L GO-2026-5932	*
L Link Following	<0.15.6-r0
L Directory Traversal	<0.15.6-r0
L GHSA-259r-337f-4rfw	<0.15.1-r0
L CVE-2026-56852	<0.15.2-r0
L GHSA-hrxh-6v49-42gf	<0.15.4-r0
L CVE-2026-46600	<0.14.25-r0
L CVE-2026-42505	<0.15.2-r0
L CVE-2026-39822	<0.15.2-r0
L Untrusted Search Path	<0.14.23-r0
L Uncontrolled Memory Allocation	<0.14.23-r0
H Untrusted Search Path	<0.14.23-r0
L CVE-2026-47262	<0.14.26-r0
L CVE-2026-50195	<0.14.26-r0
L Improper Input Validation	<0.14.26-r0
L Improper Input Validation	<0.14.25-r0
L Symlink Following	<0.14.26-r0
L Missing Authorization	<0.14.23-r0
L CVE-2024-45338	<0.14.23-r0
L CVE-2025-47914	<0.14.23-r0
L Improper Cleanup on Thrown Exception	<0.14.23-r0
L Improper Certificate Validation	<0.14.23-r0
H Incorrect Execution-Assigned Permissions	<0.14.23-r0
L CVE-2025-22869	<0.14.23-r0
L CVE-2025-58181	<0.14.23-r0
L Improper Verification of Cryptographic Signature	<0.14.23-r0
L Improper Restriction of Rendered UI Layers or Frames	<0.14.23-r0
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<0.14.23-r0
L Uncontrolled Recursion	<0.14.23-r0
L GHSA-w5pp-99ch-qj29	<0.14.23-r0
H Directory Traversal	<0.14.23-r0
L Improper Restriction of Rendered UI Layers or Frames	<0.14.23-r0
H Insufficiently Protected Credentials	<0.14.23-r0
L Arbitrary Argument Injection	<0.14.23-r0
M Memory Leak	<0.14.23-r0
H CVE-2025-15558	<0.14.23-r0
M Missing Initialization of Resource	<0.14.23-r0
L Improper Certificate Validation	<0.14.23-r0
M CVE-2025-11579	<0.14.23-r0
L CVE-2026-39824	<0.14.23-r0
H Authentication Bypass	<0.14.23-r0
H Incorrect Behavior Order: Validate Before Canonicalize	<0.14.23-r0
L CVE-2024-41110	<0.14.23-r0
L Deserialization of Untrusted Data	<0.14.23-r0
H Symlink Following	<0.14.23-r0
L CVE-2025-22872	<0.14.23-r0
L Cross-site Scripting (XSS)	<0.14.23-r0
L Reachable Assertion	<0.14.23-r0
L CVE-2026-46595	<0.14.23-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0.14.23-r0
H Off-by-one Error	<0.14.23-r0
L Integer Overflow or Wraparound	<0.14.23-r0
L Allocation of Resources Without Limits or Throttling	<0.14.23-r0
M Improper Validation of Integrity Check Value	<0.14.23-r0
L Integer Underflow	<0.14.23-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0.14.23-r0
L Resource Exhaustion	<0.14.23-r0
L Improper Validation of Array Index	<0.14.23-r0
L Directory Traversal	<0.14.23-r0
L CVE-2026-46598	<0.14.23-r0
L CVE-2025-22870	<0.14.23-r0
L Resource Exhaustion	<0.14.23-r0
C CVE-2026-1229	<0.14.23-r0
C Improper Encoding or Escaping of Output	<0.14.23-r0
C Directory Traversal	<0.14.23-r0
L GHSA-xr7q-jx4m-x55m	<0.14.23-r0
L Out-of-Bounds	<0.14.23-r0
L Incorrect Type Conversion or Cast	<0.14.23-r0
L CVE-2026-39821	<0.14.23-r0
L Improper Authorization	<0.14.23-r0
L Improper Certificate Validation	<0.14.23-r0
M CVE-2025-47911	<0.14.23-r0
L Cross-site Scripting (XSS)	<0.14.23-r0
H Integer Overflow or Wraparound	<0.14.23-r0
L Uncontrolled Search Path Element	<0.14.23-r0
L Improper Restriction of Rendered UI Layers or Frames	<0.14.23-r0
L Improper Validation of Specified Type of Input	<0.14.23-r0
L Directory Traversal	<0.14.23-r0
L Directory Traversal	<0.14.23-r0
L Missing Authorization	<0.14.23-r0

Vulnerability

Vulnerable Version

CVE-2026-94447