python3-ceph-common vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the python3-ceph-common package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS)	<2:20.1.0-144.el10cp
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Asymmetric Resource Consumption (Amplification)	<2:20.1.0-144.el10cp
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Improper Validation of Certificate with Host Mismatch	*
M Improper Validation of Certificate with Host Mismatch	*
M Improper Validation of Certificate with Host Mismatch	*
H Excessive Platform Resource Consumption within a Loop	*
H Excessive Platform Resource Consumption within a Loop	*
H Excessive Platform Resource Consumption within a Loop	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Verification of Source of a Communication Channel	*
M Improper Verification of Source of a Communication Channel	*
M Improper Verification of Source of a Communication Channel	*
M Improper Verification of Source of a Communication Channel	*
M Reachable Assertion	*
M Reachable Assertion	*
M Reachable Assertion	*
H Improper Input Validation	*
H Improper Input Validation	*
H Improper Input Validation	*
M Creation of Immutable Text Using String Concatenation	*
M Creation of Immutable Text Using String Concatenation	*
M Creation of Immutable Text Using String Concatenation	*
M Improper Validation of Syntactic Correctness of Input	*
M Improper Validation of Syntactic Correctness of Input	*
M Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Improper Output Neutralization for Logs	*
M Improper Output Neutralization for Logs	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M CVE-2025-4673	*
M CVE-2025-4673	*
M CVE-2025-4673	*
M Improper Handling of URL Encoding (Hex Encoding)	*
M Out-of-bounds Read	*
H Link Following	*
H Link Following	*
H Exposure of Resource to Wrong Sphere	*
H Exposure of Resource to Wrong Sphere	*
M Cross-site Scripting (XSS)	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Improper Input Validation	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Resource Exhaustion	*
M Resource Exhaustion	*
H Insufficient Verification of Data Authenticity	*
M Least Privilege Violation	*
M Least Privilege Violation	*
M Least Privilege Violation	*
M Least Privilege Violation	*

Vulnerability

Vulnerable Version

Cross-site Scripting (XSS)

<2:20.1.0-144.el10cp