strimzi-kafka-operator-fips-user-operator

Direct Vulnerabilities

Known vulnerabilities in the strimzi-kafka-operator-fips-user-operator package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Allocation of Resources Without Limits or Throttling	<1.2.0-r0
M HTTP Request Smuggling	<1.2.0-r0
L Resource Exhaustion	<1.2.0-r0
L Information Exposure Through Caching	<1.2.0-r0
H Resource Exhaustion	<1.2.0-r0
L Information Exposure	<1.2.0-r0
L Improper Encoding or Escaping of Output	<1.2.0-r0
L Incorrect Authorization	<1.2.0-r0
L Missing Release of Resource after Effective Lifetime	<1.2.0-r0
L Resource Exhaustion	<1.2.0-r0
L Resource Exhaustion	<1.2.0-r0
L GHSA-mhm7-754m-9p8w	<1.2.0-r0
L Improper Access Control	<1.2.0-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<1.2.0-r0
L GHSA-r7wm-3cxj-wff9	<1.2.0-r0
H HTTP Request Smuggling	<1.2.0-r0
L Resource Exhaustion	<1.2.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.2.0-r0
M CRLF Injection	<1.2.0-r0
L CVE-2026-40984	<1.1.0-r0
L Use of Non-Canonical URL Paths for Authorization Decisions	<1.1.0-r0
L Improper Input Validation	<1.1.0-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<1.1.0-r1
L Incorrect Authorization	<1.1.0-r1
L Server-Side Request Forgery (SSRF)	<1.1.0-r1
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<1.1.0-r1
L Incorrect Authorization	<1.1.0-r1
L Incomplete Blacklist	<1.1.0-r1
L Incomplete Blacklist	<1.1.0-r1
L Improper Access Control	<1.0.1-r2
M Allocation of Resources Without Limits or Throttling	<1.0.1-r2
L Improper Verification of Cryptographic Signature	<1.0.1-r2
C Insufficient Verification of Data Authenticity	<1.0.1-r2
L Information Exposure	<1.0.1-r2
H Resource Exhaustion	<1.0.1-r2
L Resource Exhaustion	<1.0.1-r2
L HTTP Request Smuggling	<1.0.1-r2
L Use of Insufficiently Random Values	<1.0.1-r2
C Insufficient Verification of Data Authenticity	<1.0.1-r2
L Allocation of Resources Without Limits or Throttling	<1.0.1-r2
L Resource Exhaustion	<1.0.1-r1
C HTTP Request Smuggling	<1.0.1-r1
L Resource Exhaustion	<1.0.1-r1
H HTTP Request Smuggling	<1.0.1-r1
H HTTP Response Splitting	<1.0.1-r1
C HTTP Request Smuggling	<1.0.1-r1
C Improper Input Validation	<1.0.1-r1
L Integer Overflow or Wraparound	<1.0.1-r1
M Allocation of Resources Without Limits or Throttling	<1.0.0-r0
L CRLF Injection	<1.0.1-r1
C HTTP Request Smuggling	<0.51.0-r1
H Improper Encoding or Escaping of Output	<0.51.0-r1
M Improper Validation of Certificate with Host Mismatch	<0.51.0-r1
H Improper Encoding or Escaping of Output	<0.51.0-r1
H Improper Output Neutralization for Logs	<0.51.0-r1

Vulnerability

Vulnerable Version

Allocation of Resources Without Limits or Throttling

<1.2.0-r0