foreman | Snyk

Direct Vulnerabilities

Known vulnerabilities in the foreman package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Authorization Bypass Through User-Controlled Key	*
M Incorrect Authorization	*
M Authorization Bypass Through User-Controlled Key	*
M Server-Side Request Forgery (SSRF)	*
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
L Resource Exhaustion	*
L Insecure Storage of Sensitive Information	*
M Information Exposure	*
M Improper Authorization	*
M Incorrect Authorization	*
M Cross-site Scripting (XSS)	*
L Improper Input Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
H Incorrect Privilege Assignment	*
M Improper Access Control	*
M Improper Access Control	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Access Control	*
M Improper Access Control	*
M Improper Access Control	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cleartext Transmission of Sensitive Information	*
M Cleartext Transmission of Sensitive Information	*
M Improper Handling of Missing Special Element	*
M Improper Handling of Missing Special Element	*
M Improper Handling of Missing Special Element	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Information Exposure Through Log Files	*
L Information Exposure	*
L Information Exposure	*
L Information Exposure	*
M Improper Access Control	*
M Improper Access Control	*
M Improper Access Control	*
L Improper Authorization	*
L Improper Authorization	*
L Improper Authorization	*
M Cross-site Scripting (XSS)	*
L Improper Authorization	*
L Improper Authorization	*
L Improper Authorization	*
M Cleartext Storage of Sensitive Information	*
M Cleartext Storage of Sensitive Information	*
L Missing Authorization	*
M Improper Access Control	*
M Improper Access Control	*
L Session Fixation	*
M Arbitrary Command Injection	*

Vulnerability

Vulnerable Version

Authorization Bypass Through User-Controlled Key