paketo-buildpacks-bundle-install

Direct Vulnerabilities

Known vulnerabilities in the paketo-buildpacks-bundle-install package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2026-94444	*
L Resource Exhaustion	*
L CVE-2026-94447	*
L Improper Privilege Management	*
L Improper Validation of Integrity Check Value	<0.9.10-r0
L CVE-2026-97031	*
L CVE-2026-78667	*
L CVE-2026-94440	*
L CVE-2026-78660	*
L CVE-2026-97032	*
L Resource Exhaustion	<0.9.14-r0
L CVE-2026-94439	*
L CVE-2026-78669	*
L CVE-2026-94448	*
L CVE-2026-56857	*
L CVE-2026-56866	*
L CVE-2026-97030	*
L CVE-2026-78659	*
L CVE-2026-78663	*
L CVE-2026-56851	*
L Improper Handling of Unicode Encoding	<0.9.10-r0
L Resource Exhaustion	*
L Information Exposure	<0.9.21-r0
L Resource Exhaustion	*
L Improper Handling of Case Sensitivity	*
L Improper Validation of Array Index	*
L CVE-2026-78662	*
L CVE-2026-56855	*
L Resource Exhaustion	*
L CVE-2026-56854	*
L Race Condition	<0.9.21-r0
L CVE-2026-56865	*
L CVE-2026-56864	*
L CVE-2026-56859	<0.9.21-r0
L CVE-2026-56860	<0.9.21-r0
L CVE-2026-56858	<0.9.21-r0
L CVE-2026-56853	<0.9.21-r0
L CVE-2026-33818	<0.9.21-r0
L CVE-2026-56862	<0.9.21-r0
L GO-2026-5932	*
L GHSA-xmrv-pmrh-hhx2	*
L Directory Traversal	<0.9.19-r0
L Link Following	<0.9.19-r0
L GHSA-259r-337f-4rfw	<0.9.14-r0
L CVE-2026-56852	<0.9.15-r0
L CVE-2026-46600	<0.9.12-r0
L GHSA-hrxh-6v49-42gf	<0.9.17-r0
L CVE-2026-42505	<0.9.15-r0
L CVE-2026-39822	<0.9.15-r0
L Uncontrolled Memory Allocation	<0.9.10-r0
L Untrusted Search Path	<0.9.10-r0
H Untrusted Search Path	<0.9.10-r0
L CVE-2026-47262	<0.9.13-r0
L CVE-2026-50195	<0.9.13-r0
L Improper Input Validation	<0.9.10-r0
L Improper Input Validation	<0.9.13-r0
L Symlink Following	<0.9.13-r0
L Improper Restriction of Rendered UI Layers or Frames	<0.9.10-r0
L CVE-2025-22870	<0.9.10-r0
L Integer Overflow or Wraparound	<0.9.10-r0
L Resource Exhaustion	<0.9.10-r0
L CVE-2025-47914	<0.9.10-r0
L CVE-2025-22872	<0.9.10-r0
H Off-by-one Error	<0.9.10-r0
L Incorrect Type Conversion or Cast	<0.9.10-r0
H Symlink Following	<0.9.10-r0
L GHSA-w5pp-99ch-qj29	<0.9.10-r0
M Missing Initialization of Resource	<0.9.10-r0
L Out-of-Bounds	<0.9.10-r0
H Authentication Bypass	<0.9.10-r0
L Reachable Assertion	<0.9.10-r0
H Integer Overflow or Wraparound	<0.9.10-r0
M Improper Validation of Integrity Check Value	<0.9.10-r0
C Directory Traversal	<0.9.10-r0
L Improper Cleanup on Thrown Exception	<0.9.10-r0
L Uncontrolled Recursion	<0.9.10-r0
L Missing Authorization	<0.9.10-r0
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<0.9.10-r0
L CVE-2025-58181	<0.9.10-r0
M Memory Leak	<0.9.10-r0
H Insufficiently Protected Credentials	<0.9.10-r0
L Directory Traversal	<0.9.10-r0
M CVE-2025-11579	<0.9.10-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0.9.10-r0
L CVE-2024-41110	<0.9.10-r0
L Cross-site Scripting (XSS)	<0.9.10-r0
L Missing Authorization	<0.9.10-r0
L Improper Validation of Specified Type of Input	<0.9.10-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0.9.10-r0
C Improper Encoding or Escaping of Output	<0.9.10-r0
L Improper Authorization	<0.9.10-r0
M CVE-2025-47911	<0.9.10-r0
L Deserialization of Untrusted Data	<0.9.10-r0
L Improper Restriction of Rendered UI Layers or Frames	<0.9.10-r0
L CVE-2026-46595	<0.9.10-r0
H Incorrect Execution-Assigned Permissions	<0.9.10-r0
H Directory Traversal	<0.9.10-r0
L Uncontrolled Search Path Element	<0.9.10-r0
L Improper Verification of Cryptographic Signature	<0.9.10-r0
L Improper Certificate Validation	<0.9.10-r0
L Allocation of Resources Without Limits or Throttling	<0.9.10-r0
L Directory Traversal	<0.9.10-r0
H CVE-2025-15558	<0.9.10-r0
L Improper Validation of Array Index	<0.9.10-r0
L CVE-2026-46598	<0.9.10-r0
L Cross-site Scripting (XSS)	<0.9.10-r0
L CVE-2026-39821	<0.9.10-r0
L Improper Restriction of Rendered UI Layers or Frames	<0.9.10-r0
H Incorrect Behavior Order: Validate Before Canonicalize	<0.9.10-r0
C CVE-2026-1229	<0.9.10-r0
L Improper Certificate Validation	<0.9.10-r0
L Improper Certificate Validation	<0.9.10-r0
L CVE-2025-22869	<0.9.10-r0
L Directory Traversal	<0.9.10-r0
L CVE-2026-39824	<0.9.10-r0
L Integer Underflow	<0.9.10-r0

paketo-buildpacks-bundle-install

Direct Vulnerabilities

Fix vulnerabilities automatically