satellite/iop-vulnerability-frontend-rhel9

Direct Vulnerabilities

Known vulnerabilities in the satellite/iop-vulnerability-frontend-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Reliance on Untrusted Inputs in a Security Decision	*
H Reachable Assertion	*
H Use of Predictable Algorithm in Random Number Generator	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Uncontrolled Recursion	*
H Improper Validation of Unsafe Equivalence in Input	*
M Directory Traversal	*
M Open Redirect	*
M Open Redirect	*
M Deserialization of Untrusted Data	*
M Cross-site Scripting (XSS)	*
H Excessive Platform Resource Consumption within a Loop	*
H Inefficient Regular Expression Complexity	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
H CRLF Injection	*
M Allocation of Resources Without Limits or Throttling	*
H Cross-site Scripting (XSS)	*
L Improper Neutralization of Equivalent Special Elements	*
H Excessive Platform Resource Consumption within a Loop	*
M Inappropriate Encoding for Output Context	*
M Cross-site Scripting (XSS)	*
H Access of Uninitialized Pointer	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
M Allocation of Resources Without Limits or Throttling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Uncontrolled Recursion	*
L Origin Validation Error	*
H Allocation of Resources Without Limits or Throttling	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Information Exposure	*
M Cross-site Scripting (XSS)	*
H Improper Neutralization	*
H OS Command Injection	*
M XML Injection	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Out-of-bounds Write	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Allocation of Resources Without Limits or Throttling	*
H Server-Side Request Forgery (SSRF)	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Comparison Using Wrong Factors	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Insufficient Granularity of Access Control	*
M CRLF Injection	*
M Cross-site Scripting (XSS)	*
L Out-of-bounds Write	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Arbitrary Code Injection	*
M Creation of Temporary File in Directory with Incorrect Permissions	*
M Unchecked Input for Loop Condition	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Improper Validation of Specified Quantity in Input	*
M Inefficient Regular Expression Complexity	*
L Server-Side Request Forgery (SSRF)	*
H Improper Validation of Specified Type of Input	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Use of Blocking Code in Single-threaded, Non-blocking Context	*
L Server-Side Request Forgery (SSRF)	*
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Open Redirect	*
H Allocation of Resources Without Limits or Throttling	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Integer Overflow or Wraparound	*
M Resource Exhaustion	*

satellite/iop-vulnerability-frontend-rhel9

Direct Vulnerabilities

Fix vulnerabilities automatically