aspnetcore-runtime-9.0

Direct Vulnerabilities

Known vulnerabilities in the aspnetcore-runtime-9.0 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Link Following	<0:9.0.21-1.0.1.el10_2
C Race Condition	<0:9.0.21-1.0.1.el10_2
C Algorithmic Complexity	<0:9.0.21-1.0.1.el10_2
C Cross-site Scripting (XSS)	<0:9.0.21-1.0.1.el10_2
C Weak Password Recovery Mechanism for Forgotten Password	<0:9.0.21-1.0.1.el10_2
C Authentication Bypass	<0:9.0.21-1.0.1.el10_2
C Origin Validation Error	<0:9.0.21-1.0.1.el10_2
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el10_2
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el10_2
C Out-of-bounds Write	<0:9.0.21-1.0.1.el10_2
C Inclusion of Functionality from Untrusted Control Sphere	<0:9.0.21-1.0.1.el10_2
C Algorithmic Complexity	<0:9.0.21-1.0.1.el10_2
C Information Exposure	<0:9.0.21-1.0.1.el10_2
C Deadlock	<0:9.0.21-1.0.1.el10_2
C Link Following	<0:9.0.21-1.0.1.el10_2
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el10_2
C HTTP Request Smuggling	<0:9.0.21-1.0.1.el10_2
C Improperly Controlled Sequential Memory Allocation	<0:9.0.21-1.0.1.el10_2
C Uncontrolled Recursion	<0:9.0.21-1.0.1.el10_2
C HTTP Request Smuggling	<0:9.0.21-1.0.1.el10_2
H Origin Validation Error	<0:9.0.20-1.0.1.el10_2
H Arbitrary Code Injection	<0:9.0.20-1.0.1.el10_2
H HTTP Request Smuggling	<0:9.0.19-1.0.1.el10_2
H Improper Cross-boundary Removal of Sensitive Data	<0:9.0.19-1.0.1.el10_2
H Unchecked Input for Loop Condition	<0:9.0.19-1.0.1.el10_2
H Unchecked Return Value	<0:9.0.19-1.0.1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el10_2
H Arbitrary Code Injection	<0:9.0.18-1.0.1.el10_2
H Authentication Bypass	<0:9.0.18-1.0.1.el10_2
H Incorrect Implementation of Authentication Algorithm	<0:9.0.18-1.0.1.el10_2
H Improper Encoding or Escaping of Output	<0:9.0.18-1.0.1.el10_2
H Access of Resource Using Incompatible Type ('Type Confusion')	<0:9.0.18-1.0.1.el10_2
H Stack-based Buffer Overflow	<0:9.0.18-1.0.1.el10_2
H Link Following	<0:9.0.18-1.0.1.el10_2
H Deserialization of Untrusted Data	<0:9.0.18-1.0.1.el10_2
H Improper Validation of Specified Type of Input	<0:9.0.18-1.0.1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el10_2
H Insufficient Verification of Data Authenticity	<0:9.0.18-1.0.1.el10_2
H LDAP Injection	<0:9.0.18-1.0.1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el10_2
H Deserialization of Untrusted Data	<0:9.0.18-1.0.1.el10_2
H Resource Exhaustion	<0:9.0.17-1.0.1.el10_2
H Link Following	<0:9.0.17-1.0.1.el10_2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:9.0.17-1.0.1.el10_2
H Improper Input Validation	<0:9.0.15-1.0.1.el10_1
H Resource Exhaustion	<0:9.0.15-1.0.1.el10_1
H Improper Input Validation	<0:9.0.15-1.0.1.el10_1
H Improper Neutralization of Special Elements	<0:9.0.15-1.0.1.el10_1
H Allocation of Resources Without Limits or Throttling	<0:9.0.14-1.0.1.el10_1
H Out-of-bounds Read	<0:9.0.14-1.0.1.el10_1
H HTTP Request Smuggling	<0:9.0.10-1.0.1.el10_0
H Inadequate Encryption Strength	<0:9.0.10-1.0.1.el10_0
H Link Following	<0:9.0.10-1.0.1.el10_0
H Untrusted Search Path	<0:9.0.6-1.0.1.el10_0
H External Control of File Name or Path	<0:9.0.6-1.0.1.el10_0

Vulnerability

Vulnerable Version

Link Following

<0:9.0.21-1.0.1.el10_2