satellite/iop-advisor-backend-rhel9

Direct Vulnerabilities

Known vulnerabilities in the satellite/iop-advisor-backend-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Incorrect Execution-Assigned Permissions

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Link Following

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Unchecked Input for Loop Condition

*
  • H
Improper Validation of Consistency within Input

*
  • M
Improper Validation of Integrity Check Value

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
OS Command Injection

*
  • H
Reliance on Untrusted Inputs in a Security Decision

*
  • H
Creation of Immutable Text Using String Concatenation

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Directory Traversal

*
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

*
  • M
Improper Output Neutralization for Logs

*
  • M
Link Following

*
  • H
OS Command Injection

*
  • M
Link Following

*
  • H
Arbitrary Code Injection

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • H
OS Command Injection

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Link Following

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Link Following

*
  • M
Insecure Preserved Inherited Permissions

*
  • M
Unrestricted Externally Accessible Lock

*
  • L
Link Following

*
  • H
Arbitrary Code Injection

*
  • M
Link Following

*
  • M
Reliance on Untrusted Inputs in a Security Decision

*
  • H
Arbitrary Code Injection

*
  • M
Link Following

*
  • M
Download of Code Without Integrity Check

*
  • M
Download of Code Without Integrity Check

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • H
OS Command Injection

*
  • M
CRLF Injection

*
  • M
Directory Traversal

*
  • M
Link Following

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Arbitrary Code Injection

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Reliance on Untrusted Inputs in a Security Decision

*
  • M
Cross-site Scripting (XSS)

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Improper Certificate Validation

*
  • M
Information Exposure

*
  • H
OS Command Injection

*
  • H
Download of Code Without Integrity Check

*
  • H
Arbitrary Code Injection

*
  • M
CRLF Injection

*
  • H
Improper Certificate Validation

*
  • M
Improper Certificate Validation

*
  • L
Improper Validation of Unsafe Equivalence in Input

*
  • H
Out-of-bounds Read

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • H
Excessive Platform Resource Consumption within a Loop

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • L
Buffer Over-read

*
  • L
HTTP Response Splitting

*
  • L
Information Exposure Through Caching

*
  • M
Misinterpretation of Input

*
  • M
Improper Validation of Syntactic Correctness of Input

*
  • M
Off-by-one Error

*
  • L
Missing Required Cryptographic Step

*
  • L
Improper Validation of Unsafe Equivalence in Input

*
  • L
Incorrect Implementation of Authentication Algorithm

*
  • L
Information Exposure Through Caching

*
  • L
Information Exposure Through Caching

*
  • M
Information Exposure

*
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

*
  • M
Arbitrary Code Injection

*
  • L
Out-of-bounds Write

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Creation of Temporary File in Directory with Incorrect Permissions

*
  • M
Link Following

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • L
Information Exposure

*
  • L
Directory Traversal

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Link Following

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
SQL Injection

*
  • H
SQL Injection

*