eks-distro-1.32-coredns-fips-1.11.4

Direct Vulnerabilities

Known vulnerabilities in the eks-distro-1.32-coredns-fips-1.11.4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L GHSA-259r-337f-4rfw	*
L CVE-2026-46600	*
L CVE-2026-56852	*
L GHSA-hrxh-6v49-42gf	*
L CVE-2026-39822	*
L GO-2026-5932	*
L CVE-2026-42505	*
L Untrusted Search Path	*
L Uncontrolled Memory Allocation	*
L GHSA-xmrv-pmrh-hhx2	*
H Untrusted Search Path	*
L CVE-2026-39821	*
L Improper Certificate Validation	*
L Resource Exhaustion	*
M Use of a Broken or Risky Cryptographic Algorithm	*
L Deserialization of Untrusted Data	*
H Allocation of Resources Without Limits or Throttling	*
L CVE-2024-45338	*
M CVE-2025-47911	*
L Improper Certificate Validation	*
L Incorrect Type Conversion or Cast	*
L CVE-2026-42504	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Out-of-Bounds	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Integer Overflow or Wraparound	*
L Cross-site Scripting (XSS)	*
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	*
L Missing Authorization	*
L Improper Verification of Cryptographic Signature	*
L Use of a Broken or Risky Cryptographic Algorithm	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L CVE-2026-46595	*
L Missing Authorization	*
L Reachable Assertion	*
L CVE-2026-46598	*
L Improper Certificate Validation	*
L CVE-2026-27145	*
L Improper Restriction of Rendered UI Layers or Frames	*
L CVE-2026-42507	*
L CVE-2026-39824	*
H Allocation of Resources Without Limits or Throttling	<1.32.36-r2
M Out-of-bounds Write	<1.32.36-r2
H Allocation of Resources Without Limits or Throttling	*
H Incorrect Implementation of Authentication Algorithm	*
H Double Free	<1.32.36-r2
C Improper Authentication	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.32.36-r2
H Incorrect Authorization	*
H NULL Pointer Dereference	<1.32.36-r2
L CVE-2026-39825	<1.32.36-r2
L CVE-2026-42501	<1.32.36-r2
L Improper Encoding or Escaping of Output	<1.32.36-r2
M Time-of-check Time-of-use (TOCTOU)	*
L CVE-2026-42499	<1.32.36-r2
L Improper Authorization	*
L Predictable Seed in PRNG	*
M Link Following	<1.32.36-r2
H Resource Exhaustion	*
L Cross-site Scripting (XSS)	<1.32.36-r2
L Directory Traversal	<1.32.31-r3
L Direct Request ('Forced Browsing')	<1.32.31-r3
L Cross-site Scripting (XSS)	<1.32.31-r3
C CVE-2025-68121	<1.32.31-r3
L CVE-2025-61732	<1.32.31-r3
L CVE-2024-45337	*
L Insufficient Verification of Data Authenticity	*
H Allocation of Resources Without Limits or Throttling	*
L CVE-2025-58181	*
L Incorrect Conversion between Numeric Types	*
L Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
L Asymmetric Resource Consumption (Amplification)	*
L CVE-2025-22872	*
L Reachable Assertion	*
L Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
L CVE-2025-47914	*
L CVE-2025-22868	*
L CVE-2025-22870	*
L CVE-2025-22869	*

eks-distro-1.32-coredns-fips-1.11.4

Direct Vulnerabilities

Fix vulnerabilities automatically