automation-controller

Direct Vulnerabilities

Known vulnerabilities in the automation-controller package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	*
M Improperly Implemented Security Check for Standard	*
M Arbitrary Argument Injection	*
M Open Redirect	*
M Exposure of System Data to an Unauthorized Control Sphere	*
H Inefficient Regular Expression Complexity	*
H Arbitrary Argument Injection	*
M Link Following	*
H Arbitrary Argument Injection	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Origin Validation Error	*
H Improper Verification of Cryptographic Signature	*
H Improper Verification of Cryptographic Signature	*
M Incorrect Behavior Order: Early Amplification	*
M Uncaught Exception	*
M Inefficient Regular Expression Complexity	*
M Improper Validation of Syntactic Correctness of Input	*
M Unchecked Input for Loop Condition	*
M Uncaught Exception	*
H Improper Verification of Cryptographic Signature	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
H Authentication Bypass	*
M Authorization Bypass Through User-Controlled Key	*
M Cross-site Scripting (XSS)	*
M Inefficient Regular Expression Complexity	*
L Server-Side Request Forgery (SSRF)	*
H Excessive Platform Resource Consumption within a Loop	*
M Resource Exhaustion	*
M Server-Side Request Forgery (SSRF)	*
M Allocation of Resources Without Limits or Throttling	*
M Improperly Implemented Security Check for Standard	*
H Inefficient Regular Expression Complexity	*
M Improper Update of Reference Count	*
M Directory Traversal	*
M Uncaught Exception	*
M Improper Verification of Cryptographic Signature	*
H Directory Traversal	*
M Directory Traversal	*
H Improper Verification of Cryptographic Signature	*
M Insufficient Session Expiration	*
M Use of Multiple Resources with Duplicate Identifier	*
M Improperly Implemented Security Check for Standard	*
M Incorrect Implementation of Authentication Algorithm	*
M Improper Validation of Specified Quantity in Input	*
H Static Code Injection	*
M Authorization Bypass Through User-Controlled Key	*
M Server-Side Request Forgery (SSRF)	*
M Information Exposure	*
H Missing Authorization	*
H Information Exposure	*
H Improper Validation of Specified Index, Position, or Offset in Input	*
M Cross-site Scripting (XSS)	*
M Algorithmic Complexity	*
H Missing Release of Resource after Effective Lifetime	*
M External Control of File Name or Path	*
M Inefficient Regular Expression Complexity	*
M Server-Side Request Forgery (SSRF)	*
H Improper Validation of Specified Type of Input	*
H Improper Validation of Specified Quantity in Input	*
M Improper Verification of Cryptographic Signature	*
L Allocation of Resources Without Limits or Throttling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Allocation of Resources Without Limits or Throttling	*
M Insufficient Session Expiration	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
H Directory Traversal	*
H Directory Traversal	*
H Numeric Range Comparison Without Minimum Check	*
M Cross-site Scripting (XSS)	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Handling of Highly Compressed Data (Data Amplification)	*
M Expression Language Injection	*
M Allocation of Resources Without Limits or Throttling	*
M Direct Request ('Forced Browsing')	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Unchecked Input for Loop Condition	*
M Cross-site Scripting (XSS)	*
M Excessive Platform Resource Consumption within a Loop	*
H Unrestricted Upload of File with Dangerous Type	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
M Deserialization of Untrusted Data	*
M Cross-site Scripting (XSS)	*
H Unchecked Input for Loop Condition	*
M Missing Authorization	*
L HTTP Response Splitting	*
L Buffer Over-read	*
L Information Exposure Through Caching	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Write	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L CRLF Injection	*
M Inefficient Regular Expression Complexity	*
M Allocation of Resources Without Limits or Throttling	*
M Integer Overflow or Wraparound	*
M Time-of-check Time-of-use (TOCTOU)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Handling of Highly Compressed Data (Data Amplification)	*
L Improper Neutralization of Equivalent Special Elements	*
L Cross-site Request Forgery (CSRF)	*
L Improper Verification of Source of a Communication Channel	*
H Excessive Platform Resource Consumption within a Loop	*
M Server-Side Request Forgery (SSRF)	*
M Directory Traversal	*
H Access of Uninitialized Pointer	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Allocation of Resources Without Limits or Throttling	*
H Information Exposure	*
H Information Exposure	*
H Inefficient Regular Expression Complexity	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Authentication Bypass	*
L Origin Validation Error	*
L HTTP Request Smuggling	*
M Improper Verification of Cryptographic Signature	*
M Allocation of Resources Without Limits or Throttling	*
M Server-Side Request Forgery (SSRF)	*
M Allocation of Resources Without Limits or Throttling	*
M Exposure of Data Element to Wrong Session	*
M Allocation of Resources Without Limits or Throttling	*
L Incorrect Implementation of Authentication Algorithm	*
M Information Exposure	*
L Improper Validation of Unsafe Equivalence in Input	*
L Information Exposure Through Caching	*
L Missing Required Cryptographic Step	*
L Information Exposure Through Caching	*
M Improper Input Validation	*
M Improper Neutralization of Null Byte or NUL Character	*
M Uncontrolled Recursion	*
M Integer Overflow or Wraparound	*
M Uncontrolled Recursion	*
M Uncontrolled Recursion	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Integer Overflow or Wraparound	*
M Information Exposure Through Caching	*
M Out-of-bounds Write	*
M Time-of-check Time-of-use (TOCTOU)	*
H Server-Side Request Forgery (SSRF)	*
H Allocation of Resources Without Limits or Throttling	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Arbitrary Code Injection	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Insufficient Granularity of Access Control	*
M Comparison Using Wrong Factors	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M XML External Entity (XXE) Injection	*
M CRLF Injection	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L Out-of-bounds Write	*
M Improper Validation of Unsafe Equivalence in Input	*
H Improper Cross-boundary Removal of Sensitive Data	*
M Improper Validation of Specified Type of Input	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Improper Validation of Specified Type of Input	*
M Uncontrolled Recursion	*
M Integer Overflow or Wraparound	*
H Improper Validation of Unsafe Equivalence in Input	*
M Time-of-check Time-of-use (TOCTOU)	*
H External Control of Assumed-Immutable Web Parameter	*
H Insufficient Granularity of Access Control	*
M Improper Handling of Length Parameter Inconsistency	*
M Improper Validation of Syntactic Correctness of Input	*
M Authorization Bypass Through User-Controlled Key	*
M HTTP Request Smuggling	*
M External Control of Assumed-Immutable Web Parameter	*
M Directory Traversal	*
L Allocation of Resources Without Limits or Throttling	*
L Exposure of System Data to an Unauthorized Control Sphere	*
M HTTP Request Smuggling	*
M CRLF Injection	*
M Improper Validation of Syntactic Correctness of Input	*
L Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
L Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
H Arbitrary Code Injection	*
L Improper Certificate Validation	*
M Inefficient Regular Expression Complexity	*
H Inefficient Regular Expression Complexity	*
M Creation of Temporary File in Directory with Incorrect Permissions	*
M Unchecked Input for Loop Condition	*
M Inefficient Regular Expression Complexity	*
M Buffer Access with Incorrect Length Value	*
M Cross-site Scripting (XSS)	*
H SQL Injection	*
H SQL Injection	*
L Time-of-check Time-of-use (TOCTOU)	*
M Cross-site Scripting (XSS)	*
L Directory Traversal	*
M Allocation of Resources Without Limits or Throttling	*
H SQL Injection	*
M Not Failing Securely ('Failing Open')	*
L Server-Side Request Forgery (SSRF)	*
L Server-Side Request Forgery (SSRF)	*
M Open Redirect	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
M Incomplete Blacklist	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Allocation of Resources Without Limits or Throttling	*
L Logging of Excessive Data	*
M Allocation of Resources Without Limits or Throttling	*
M Directory Traversal	*
L HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M SQL Injection	*
M Time-of-check Time-of-use (TOCTOU)	*
H Allocation of Resources Without Limits or Throttling	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Improper Null Termination	*
M LDAP Injection	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Directory Traversal	*
L Directory Traversal	*
L Reachable Assertion	*
M Inefficient Regular Expression Complexity	*
L Improper Handling of Unexpected Data Type	*
M Allocation of Resources Without Limits or Throttling	*
H Out-of-bounds Write	*
M Use After Free	*
M Open Redirect	*
M Open Redirect	*
L Inefficient Regular Expression Complexity	*
M Uncontrolled Recursion	*
M Integer Overflow or Wraparound	*
M Origin Validation Error	*
M Exposed Dangerous Method or Function	*
M Buffer Over-read	*
M Allocation of Resources Without Limits or Throttling	*
M Directory Traversal	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Arbitrary Code Injection	*
M Resource Exhaustion	*
M Excessive Platform Resource Consumption within a Loop	*
M Information Exposure	*
M Always-Incorrect Control Flow Implementation	*
M Cross-site Scripting (XSS)	*
M Improper Check for Unusual or Exceptional Conditions	*
H Arbitrary Code Injection	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
H Server-Side Request Forgery (SSRF)	*
M Directory Traversal	*
L Incorrect Regular Expression	*
M Improper Handling of Insufficient Permissions or Privileges	*
M Path Equivalence	*
L Directory Traversal	*
L CVE-2024-45231	*
L Inefficient Regular Expression Complexity	*
M Server-Side Request Forgery (SSRF)	*
H Insufficient Compartmentalization	*
M Inefficient Regular Expression Complexity	*
M Open Redirect	*
M Use of a Broken or Risky Cryptographic Algorithm	*
M Improper Cross-boundary Removal of Sensitive Data	*
M Path Equivalence	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Certificate Validation	*
H SQL Injection	*
M Inefficient Regular Expression Complexity	*
H Allocation of Resources Without Limits or Throttling	*

Vulnerability

Vulnerable Version

Directory Traversal