skopeo-tests

Direct Vulnerabilities

Known vulnerabilities in the skopeo-tests package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Missing Release of Resource after Effective Lifetime	<0:1.23.0-1.hum1
M Improper Input Validation	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.24.1-1.1.hum1
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
M Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
L Link Following	*
M Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
L Link Following	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.23.0-3.1.hum1
H Use of Out-of-range Pointer Offset	<0:1.24.1-1.hum1
M Insecure Inherited Permissions	*
M Insecure Inherited Permissions	*
L Link Following	*
L Link Following	*
M Missing Release of Resource after Effective Lifetime	*
H Cross-site Scripting (XSS)	<2:1.22.2-5.el10_2
H Creation of Immutable Text Using String Concatenation	<2:1.22.2-5.el10_2
H Excessive Platform Resource Consumption within a Loop	<2:1.22.2-5.el10_2
H Allocation of Resources Without Limits or Throttling	<2:1.22.2-5.el10_2
H Allocation of Resources Without Limits or Throttling	<2:1.22.2-5.el10_2
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<2:1.22.2-5.el10_2
L Missing Release of Resource after Effective Lifetime	*
M Information Exposure	*
M Server-Side Request Forgery (SSRF)	*
H Excessive Platform Resource Consumption within a Loop	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Cross-site Scripting (XSS)	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
L Time-of-check Time-of-use (TOCTOU)	*
H Unchecked Input for Loop Condition	*
M Information Exposure	*
H Uncontrolled Search Path Element	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	<2:1.22.2-2.el10_2
M External Control of Assumed-Immutable Web Parameter	*
M External Control of Assumed-Immutable Web Parameter	*
M Excessive Platform Resource Consumption within a Loop	<2:1.22.2-2.el10_2
H Multiple Locks of a Critical Resource	<2:1.22.2-2.el10_2
M Improper Output Neutralization for Logs	*
M Improper Output Neutralization for Logs	*
L Missing Release of Resource after Effective Lifetime	*
M Improper Validation of Unsafe Equivalence in Input	*
M Improper Validation of Unsafe Equivalence in Input	*
M Excessive Platform Resource Consumption within a Loop	<2:1.18.1-3.el10_0.2
H Allocation of Resources Without Limits or Throttling	<2:1.18.1-3.el10_0.2
H Multiple Locks of a Critical Resource	<2:1.18.1-3.el10_0.2
H Improper Validation of Syntactic Correctness of Input	<2:1.22.2-1.el10_2
H Excessive Platform Resource Consumption within a Loop	<2:1.18.1-3.el10_0.1
H Allocation of Resources Without Limits or Throttling	<2:1.18.1-3.el10_0.1
H Incorrect Calculation of Buffer Size	<2:1.18.1-3.el10_0.1
H Improper Validation of Syntactic Correctness of Input	<2:1.18.1-3.el10_0.1
M Improper Certificate Validation	<2:1.18.1-3.el10_0.1
H Multiple Locks of a Critical Resource	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Time-of-check Time-of-use (TOCTOU)	*
M Excessive Platform Resource Consumption within a Loop	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Incorrect Calculation of Buffer Size	*
H Incorrect Calculation of Buffer Size	*
H Improper Certificate Validation	*
H Allocation of Resources Without Limits or Throttling	<2:1.20.0-3.el10_1
M Improper Certificate Validation	<2:1.20.0-3.el10_1
H Excessive Platform Resource Consumption within a Loop	<2:1.20.0-3.el10_1
M Directory Traversal	*
M Directory Traversal	*
M Server-Side Request Forgery (SSRF)	*
M NULL Pointer Dereference	*
M Server-Side Request Forgery (SSRF)	*
M Server-Side Request Forgery (SSRF)	*
M Allocation of Resources Without Limits or Throttling	<2:1.20.0-2.el10_1
M Allocation of Resources Without Limits or Throttling	<2:1.18.1-3.el10_0
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Resource Exhaustion	*
M Creation of Immutable Text Using String Concatenation	*
M Creation of Immutable Text Using String Concatenation	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Improper Output Neutralization for Logs	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
M Information Exposure	*
M Information Exposure	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Information Exposure	*
M Information Exposure	*
L Improper Verification of Cryptographic Signature	*
L Improper Verification of Cryptographic Signature	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M Missing Release of Resource after Effective Lifetime	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Use of Uninitialized Variable	*
M Insufficiently Protected Credentials	*
L Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Integer Overflow or Wraparound	*
M Buffer Overflow	*
M Information Exposure	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Incorrect Calculation	*
M HTTP Request Smuggling	*
H Uncontrolled Recursion	*
M Directory Traversal	*
M HTTP Request Smuggling	<2:1.18.1-2.el10_0
M Allocation of Resources Without Limits or Throttling	<2:1.18.1-1.el10_0

Vulnerability

Vulnerable Version

Missing Release of Resource after Effective Lifetime

<0:1.23.0-1.hum1