eks-distro-1.32-coredns-fips-1.12.4

Direct Vulnerabilities

Known vulnerabilities in the eks-distro-1.32-coredns-fips-1.12.4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2026-39822	<1.32.38-r1
L CVE-2026-42505	<1.32.38-r1
L Uncontrolled Memory Allocation	<1.32.37-r0
H Allocation of Resources Without Limits or Throttling	<1.32.40-r0
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<1.32.40-r0
L Missing Authorization	<1.32.40-r0
L Deserialization of Untrusted Data	<1.32.40-r0
L Resource Exhaustion	<1.32.40-r0
L Improper Restriction of Rendered UI Layers or Frames	<1.32.40-r0
L Improper Restriction of Rendered UI Layers or Frames	<1.32.40-r0
L Cross-site Scripting (XSS)	<1.32.40-r0
L Missing Authorization	<1.32.40-r0
L Improper Restriction of Rendered UI Layers or Frames	<1.32.40-r0
L Incorrect Type Conversion or Cast	<1.32.40-r0
L CVE-2026-46598	<1.32.40-r0
L Improper Certificate Validation	<1.32.40-r0
L Improper Certificate Validation	<1.32.40-r0
L CVE-2026-39821	<1.32.40-r0
L Out-of-Bounds	<1.32.40-r0
L Integer Overflow or Wraparound	<1.32.40-r0
L Improper Verification of Cryptographic Signature	<1.32.40-r0
L CVE-2026-46595	<1.32.40-r0
L Improper Certificate Validation	<1.32.40-r0
L CVE-2026-42504	<1.32.37-r1
L CVE-2026-27145	<1.32.37-r1
L CVE-2026-42507	<1.32.37-r1
M CVE-2025-47911	<1.32.35-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<1.32.35-r0
L Reachable Assertion	<1.32.35-r0
H Allocation of Resources Without Limits or Throttling	<1.32.36-r2
M Out-of-bounds Write	<1.32.36-r2
H Double Free	<1.32.36-r2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.32.36-r2
L CVE-2026-39825	<1.32.36-r2
H NULL Pointer Dereference	<1.32.36-r2
L CVE-2026-42501	<1.32.36-r2
L Improper Encoding or Escaping of Output	<1.32.36-r2
L CVE-2026-42499	<1.32.36-r2
M Link Following	<1.32.36-r2
L Cross-site Scripting (XSS)	<1.32.36-r2
L Improper Authorization	<1.32.36-r0
H Allocation of Resources Without Limits or Throttling	*
H Incorrect Implementation of Authentication Algorithm	*
C Improper Authentication	*
H Incorrect Authorization	*
H Resource Exhaustion	*
L Allocation of Resources Without Limits or Throttling	<1.32.37-r0
C CVE-2026-27143	<1.32.36-r1
H Access of Resource Using Incompatible Type ('Type Confusion')	<1.32.36-r1
M Cross-site Scripting (XSS)	<1.32.36-r1
M Allocation of Resources Without Limits or Throttling	<1.32.36-r1
H Improper Certificate Validation	<1.32.36-r1
H Improper Certificate Validation	<1.32.36-r1
M Link Following	<1.32.36-r1
H Allocation of Resources Without Limits or Throttling	<1.32.36-r1
L CVE-2026-32280	<1.32.36-r1
H Incorrect Authorization	<1.32.36-r1
M Time-of-check Time-of-use (TOCTOU)	*
L Predictable Seed in PRNG	*
L Untrusted Search Path	<1.32.36-r0
L Directory Traversal	<1.32.31-r3
L Direct Request ('Forced Browsing')	<1.32.31-r3
L Cross-site Scripting (XSS)	<1.32.31-r3
C CVE-2025-68121	<1.32.31-r3
L CVE-2025-61732	<1.32.31-r3
H Allocation of Resources Without Limits or Throttling	*
L CVE-2025-58181	<1.32.35-r0
L Allocation of Resources Without Limits or Throttling	<1.32.35-r0
L Reachable Assertion	<1.32.35-r0
L Allocation of Resources Without Limits or Throttling	<1.32.35-r0
L CVE-2025-47914	<1.32.35-r0

eks-distro-1.32-coredns-fips-1.12.4

Direct Vulnerabilities

Fix vulnerabilities automatically