cri-o | Snyk

Direct Vulnerabilities

Known vulnerabilities in the cri-o package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	*
M Uncaught Exception	*
H Improper Certificate Validation	<0:1.34.15-2.rhaos4.21.git0903fe5.el10
H Use of Externally-Controlled Format String	*
M Information Exposure	*
M Information Exposure	*
M Missing Release of Resource after Effective Lifetime	*
H Out-of-bounds Read	*
H Out-of-bounds Read	*
M Improper Output Neutralization for Logs	*
M Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M HTTP Request Smuggling	*
M Allocation of Resources Without Limits or Throttling	*
H Trust Boundary Violation	*
L Missing Release of Resource after Effective Lifetime	*
L Missing Release of Resource after Effective Lifetime	*
M HTTP Request Smuggling	*
M Improper Validation of Specified Type of Input	*
M Trust Boundary Violation	*
M Improper Verification of Source of a Communication Channel	*
M Origin Validation Error	*
M Allocation of Resources Without Limits or Throttling	*
M Missing Release of Resource after Effective Lifetime	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Execution with Unnecessary Privileges	*
H Excessive Platform Resource Consumption within a Loop	*
H Allocation of Resources Without Limits or Throttling	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Cross-site Scripting (XSS)	*
H Unchecked Input for Loop Condition	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
M Deadlock	*
M Deadlock	*
L Authentication Bypass by Primary Weakness	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
M Directory Traversal	*
H Allocation of Resources Without Limits or Throttling	*
H Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Incorrect Calculation of Buffer Size	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
M Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
M Origin Validation Error	*
L Missing Release of Resource after Effective Lifetime	*
M Allocation of Resources Without Limits or Throttling	*
M Reliance on Untrusted Inputs in a Security Decision	*
M Missing Release of Resource after Effective Lifetime	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
M HTTP Request Smuggling	*
L Link Following	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Link Following	*
M Directory Traversal	*
M Directory Traversal	*
H Execution with Unnecessary Privileges	*
M Missing Release of Resource after Effective Lifetime	*
M Uncaught Exception	*
H Improper Validation of Specified Type of Input	*
M Deadlock	*
M Deadlock	*
L Missing Release of Resource after Effective Lifetime	*
M Improper Validation of Specified Type of Input	*
M Trust Boundary Violation	*
M Improper Verification of Source of a Communication Channel	*
M Origin Validation Error	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Out-of-bounds Read	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Improperly Implemented Security Check for Standard	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M Improper Validation of Specified Type of Input	*
M Improper Output Neutralization for Logs	*
M Improper Validation of Unsafe Equivalence in Input	*
M Open Redirect	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
L Improper Validation of Specified Quantity in Input	*
H Improper Certificate Validation	*
M Open Redirect	*
M Improper Certificate Validation	*
M Improper Validation of Integrity Check Value	*
M Directory Traversal	*
M Resource Exhaustion	*
M Missing Reference to Active Allocated Resource	*
M Server-Side Request Forgery (SSRF)	*
H Excessive Platform Resource Consumption within a Loop	*
M Improper Certificate Validation	*
M Creation of Immutable Text Using String Concatenation	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Allocation of Resources Without Limits or Throttling	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Allocation of Resources Without Limits or Throttling	*
M Time-of-check Time-of-use (TOCTOU)	*
M Allocation of Resources Without Limits or Throttling	*
M Information Exposure	*
L Improper Verification of Cryptographic Signature	*
M Information Exposure	*
M Information Exposure	*
L Incorrect Authorization	*
L Incorrect Authorization	*
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Allocation of Resources Without Limits or Throttling	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
M Improper Authorization	*
L Race Condition	*
H Resource Exhaustion	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Integer Overflow or Wraparound	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Incorrect Default Permissions	*
H Resource Exhaustion	*
L Improper Access Control	*
L Incorrect Default Permissions	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Use After Free	*
M Incorrect Permission Assignment for Critical Resource	*
M Incorrect Calculation	*
M Allocation of Resources Without Limits or Throttling	*
H Directory Traversal	*

Vulnerability

Vulnerable Version

Directory Traversal