dotnet-runtime-9.0

Direct Vulnerabilities

Known vulnerabilities in the dotnet-runtime-9.0 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Inclusion of Functionality from Untrusted Control Sphere	<0:9.0.21-1.0.1.el10_2
C Authentication Bypass	<0:9.0.21-1.0.1.el10_2
C Algorithmic Complexity	<0:9.0.21-1.0.1.el10_2
C Origin Validation Error	<0:9.0.21-1.0.1.el10_2
C Race Condition	<0:9.0.21-1.0.1.el10_2
C Link Following	<0:9.0.21-1.0.1.el10_2
C HTTP Request Smuggling	<0:9.0.21-1.0.1.el10_2
C HTTP Request Smuggling	<0:9.0.21-1.0.1.el10_2
C Link Following	<0:9.0.21-1.0.1.el10_2
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el10_2
C Improperly Controlled Sequential Memory Allocation	<0:9.0.21-1.0.1.el10_2
C Deadlock	<0:9.0.21-1.0.1.el10_2
C Out-of-bounds Write	<0:9.0.21-1.0.1.el10_2
C Cross-site Scripting (XSS)	<0:9.0.21-1.0.1.el10_2
C Information Exposure	<0:9.0.21-1.0.1.el10_2
C Uncontrolled Recursion	<0:9.0.21-1.0.1.el10_2
C Weak Password Recovery Mechanism for Forgotten Password	<0:9.0.21-1.0.1.el10_2
C Algorithmic Complexity	<0:9.0.21-1.0.1.el10_2
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el10_2
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el10_2
H Origin Validation Error	<0:9.0.20-1.0.1.el10_2
H Arbitrary Code Injection	<0:9.0.20-1.0.1.el10_2
H HTTP Request Smuggling	<0:9.0.19-1.0.1.el10_2
H Unchecked Return Value	<0:9.0.19-1.0.1.el10_2
H Unchecked Input for Loop Condition	<0:9.0.19-1.0.1.el10_2
H Improper Cross-boundary Removal of Sensitive Data	<0:9.0.19-1.0.1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el10_2
H Improper Encoding or Escaping of Output	<0:9.0.18-1.0.1.el10_2
H Access of Resource Using Incompatible Type ('Type Confusion')	<0:9.0.18-1.0.1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el10_2
H Stack-based Buffer Overflow	<0:9.0.18-1.0.1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el10_2
H Authentication Bypass	<0:9.0.18-1.0.1.el10_2
H LDAP Injection	<0:9.0.18-1.0.1.el10_2
H Incorrect Implementation of Authentication Algorithm	<0:9.0.18-1.0.1.el10_2
H Deserialization of Untrusted Data	<0:9.0.18-1.0.1.el10_2
H Link Following	<0:9.0.18-1.0.1.el10_2
H Improper Validation of Specified Type of Input	<0:9.0.18-1.0.1.el10_2
H Arbitrary Code Injection	<0:9.0.18-1.0.1.el10_2
H Deserialization of Untrusted Data	<0:9.0.18-1.0.1.el10_2
H Insufficient Verification of Data Authenticity	<0:9.0.18-1.0.1.el10_2
H Resource Exhaustion	<0:9.0.17-1.0.1.el10_2
H Link Following	<0:9.0.17-1.0.1.el10_2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:9.0.17-1.0.1.el10_2
H Improper Input Validation	<0:9.0.15-1.0.1.el10_1
H Improper Neutralization of Special Elements	<0:9.0.15-1.0.1.el10_1
H Resource Exhaustion	<0:9.0.15-1.0.1.el10_1
H Improper Input Validation	<0:9.0.15-1.0.1.el10_1
H Allocation of Resources Without Limits or Throttling	<0:9.0.14-1.0.1.el10_1
H Out-of-bounds Read	<0:9.0.14-1.0.1.el10_1
H Link Following	<0:9.0.10-1.0.1.el10_0
H HTTP Request Smuggling	<0:9.0.10-1.0.1.el10_0
H Inadequate Encryption Strength	<0:9.0.10-1.0.1.el10_0
H Untrusted Search Path	<0:9.0.6-1.0.1.el10_0
H External Control of File Name or Path	<0:9.0.6-1.0.1.el10_0

Vulnerability

Vulnerable Version

Inclusion of Functionality from Untrusted Control Sphere

<0:9.0.21-1.0.1.el10_2