solr-9

Direct Vulnerabilities

Known vulnerabilities in the solr-9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Server-Side Request Forgery (SSRF)

<9.11.0-r0
  • L
CVE-2026-68494

<9.11.0-r0
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<9.11.0-r0
  • L
Information Exposure

<9.11.0-r0
  • L
Server-Side Request Forgery (SSRF)

<9.11.0-r0
  • L
GHSA-mhm7-754m-9p8w

<9.11.0-r0
  • L
Improper Encoding or Escaping of Output

<9.11.0-r0
  • L
Incorrect Authorization

<9.11.0-r0
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<9.11.0-r0
  • L
CVE-2026-83557

<9.11.0-r0
  • L
CVE-2026-68497

<9.11.0-r0
  • L
CVE-2026-19032

<9.11.0-r0
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<9.10.0-r0
  • C
Use of Hard-coded Credentials

<9.11.0-r0
  • L
Incomplete Blacklist

<9.11.0-r0
  • L
Incomplete Blacklist

<9.11.0-r0
  • L
Improper Verification of Cryptographic Signature

<9.11.0-r0
  • L
Allocation of Resources Without Limits or Throttling

<9.11.0-r0
  • L
Improper Access Control

<9.11.0-r0
  • M
Improper Input Validation

*
  • L
Missing Release of Resource after Effective Lifetime

<9.11.0-r0
  • L
Resource Exhaustion

<9.10.0-r0
  • H
Information Exposure Through Log Files

<9.11.0-r0
  • H
Improper Certificate Validation

<9.11.0-r0
  • H
Improper Output Neutralization for Logs

<9.11.0-r0
  • C
HTTP Request Smuggling

*
  • H
Improper Encoding or Escaping of Output

<9.11.0-r0
  • M
Improper Validation of Certificate with Host Mismatch

<9.11.0-r0
  • H
Improper Encoding or Escaping of Output

<9.11.0-r0
  • H
Improper Encoding or Escaping of Output

<9.11.0-r0
  • L
CVE-2026-18401

<9.11.0-r0
  • L
Improper Input Validation

<9.10.1-r0
  • L
Improper Authorization

<9.10.1-r0
  • M
Improper Certificate Validation

<9.10.1-r0
  • H
Race Condition

<9.10.0-r0
  • M
Inefficient Regular Expression Complexity

*
  • L
CVE-2025-24970

<9.10.0-r0
  • M
Inefficient Regular Expression Complexity

*
  • H
Inefficient Regular Expression Complexity

*
  • H
Inefficient Regular Expression Complexity

<9.8.1-r0
  • M
CVE-2024-8372

<9.8.1-r0
  • L
CVE-2025-2336

<9.8.1-r0
  • M
CVE-2024-6763

*
  • L
Improper Handling of Insufficient Permissions or Privileges

<9.10.0-r0
  • M
Inefficient Regular Expression Complexity

*
  • L
CVE-2025-0716

*
  • M
Cross-site Scripting (XSS)

*
  • M
CVE-2024-8373

<9.8.1-r0
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<9.10.0-r0
  • H
Resource Exhaustion

<9.10.0-r0
  • L
Authentication Bypass

<9.8.1-r1
  • L
Uncontrolled Recursion

<9.10.0-r0