softhsm vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the softhsm package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
H Insufficient Granularity of Access Control	<0:2.6.0-5.module+el8.9.0+90094+20819f5a
H Incorrect Authorization	<0:2.6.0-5.module+el8.9.0+90094+20819f5a
H Use of Password Hash With Insufficient Computational Effort	<0:2.6.0-5.module+el8.9.0+90094+20819f5a
M Resource Exhaustion	<0:2.6.0-5.module+el8.9.0+90094+20819f5a
M CVE-2024-28102	<0:2.6.0-5.module+el8.9.0+90094+20819f5a
M Improper Input Validation	<0:2.6.0-5.module+el8.9.0+90094+20819f5a
M Cross-site Request Forgery (CSRF)	<0:2.6.0-5.module+el8.9.0+90094+20819f5a
M Incorrect Authorization	<0:2.6.0-5.module+el8.9.0+90094+20819f5a
M Race Condition	<0:2.6.0-5.module+el8.4.0+20161+5ecb5b37
H NULL Pointer Dereference	<0:2.6.0-5.module+el8.4.0+20161+5ecb5b37
M Cross-site Scripting (XSS)	<0:2.6.0-5.module+el8.4.0+20161+5ecb5b37
M Cross-site Scripting (XSS)	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Cross-site Scripting (XSS)	<0:2.6.0-3.module+el8.3.0+7868+2151076c
M Resource Exhaustion	<0:2.6.0-3.module+el8.3.0+7868+2151076c