rhceph/alloy-rhel10

Direct Vulnerabilities

Known vulnerabilities in the rhceph/alloy-rhel10 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Expression Language Injection	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Allocation of Resources Without Limits or Throttling	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Unchecked Input for Loop Condition	*
H Directory Traversal	*
H Time-of-check Time-of-use (TOCTOU)	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Integer Overflow or Wraparound	*
M Deserialization of Untrusted Data	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Inefficient Regular Expression Complexity	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Directory Traversal	*
H Unchecked Input for Loop Condition	*
H Deserialization of Untrusted Data	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Information Exposure	*
H Allocation of Resources Without Limits or Throttling	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
H Excessive Platform Resource Consumption within a Loop	*
M Missing Release of Resource after Effective Lifetime	*
H Improper Verification of Cryptographic Signature	*
H Incorrect Conversion between Numeric Types	*
H Arbitrary Code Injection	*
M Arbitrary Code Injection	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Link Following	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Cross-site Scripting (XSS)	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H OS Command Injection	*
H Unchecked Input for Loop Condition	*
H Cross-site Scripting (XSS)	*
M Excessive Platform Resource Consumption within a Loop	*
H Creation of Immutable Text Using String Concatenation	*
H NULL Pointer Dereference	*
H Unchecked Input for Loop Condition	*
M Improperly Implemented Security Check for Standard	*
M Cross-site Scripting (XSS)	*
M Inefficient Regular Expression Complexity	*
H Unchecked Input for Loop Condition	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Preservation of Permissions	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M Cross-site Scripting (XSS)	*
L Time-of-check Time-of-use (TOCTOU)	*
M Improper Validation of Specified Type of Input	*
H Missing Release of Resource after Effective Lifetime	*
M Open Redirect	*
H Improper Certificate Validation	*
M Improper Output Neutralization for Logs	*
M Cross-site Scripting (XSS)	*
H Improper Validation of Specified Quantity in Input	*
H Improper Preservation of Permissions	*
L Missing Release of Resource after Effective Lifetime	*
M Cross-site Scripting (XSS)	*
M Integer Overflow or Wraparound	*
M Improper Neutralization of Equivalent Special Elements	*
H Improper Validation of Unsafe Equivalence in Input	*
H Incorrect Implementation of Authentication Algorithm	*
M Improper Validation of Unsafe Equivalence in Input	*
H Release of Invalid Pointer or Reference	*
H CVE-2026-33811	*
M Improper Validation of Unsafe Equivalence in Input	*
L Out-of-bounds Write	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Arbitrary Code Injection	*
M Buffer Overflow	*
M Open Redirect	*
M SQL Injection	*
M Incorrect Privilege Assignment	*
M Out-of-bounds Write	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M HTTP Request Smuggling	*

Vulnerability

Vulnerable Version

Expression Language Injection