rhceph/alloy-rhel10

Direct Vulnerabilities

Known vulnerabilities in the rhceph/alloy-rhel10 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Certificate Validation	*
H Improper Validation of Specified Index, Position, or Offset in Input	*
M Directory Traversal	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Out-of-bounds Read	*
M Improper Certificate Validation	*
M Directory Traversal	*
M Missing Release of Resource after Effective Lifetime	*
M Directory Traversal	*
M Uncaught Exception	*
H Missing Authentication for Critical Function	*
H Link Following	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Link Following	*
M Deadlock	*
M Deadlock	*
M Reliance on Untrusted Inputs in a Security Decision	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Validation of Specified Type of Input	*
M Directory Traversal	*
H Origin Validation Error	*
M Cross-site Scripting (XSS)	*
M Reachable Assertion	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Cross-site Scripting (XSS)	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
H Cross-site Scripting (XSS)	*
H Inefficient Regular Expression Complexity	*
H Excessive Platform Resource Consumption within a Loop	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
M Expression Language Injection	*
H Allocation of Resources Without Limits or Throttling	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Unchecked Input for Loop Condition	*
H Directory Traversal	*
H Time-of-check Time-of-use (TOCTOU)	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Integer Overflow or Wraparound	*
M Deserialization of Untrusted Data	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Inefficient Regular Expression Complexity	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Directory Traversal	*
H Unchecked Input for Loop Condition	*
H Deserialization of Untrusted Data	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Information Exposure	*
H Allocation of Resources Without Limits or Throttling	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M Missing Release of Resource after Effective Lifetime	*
H Improper Verification of Cryptographic Signature	*
H Incorrect Conversion between Numeric Types	*
H Arbitrary Code Injection	*
M Arbitrary Code Injection	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Link Following	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H OS Command Injection	*
H Unchecked Input for Loop Condition	*
M Excessive Platform Resource Consumption within a Loop	*
H Creation of Immutable Text Using String Concatenation	*
H Unchecked Input for Loop Condition	*
M Improperly Implemented Security Check for Standard	*
M Cross-site Scripting (XSS)	*
M Inefficient Regular Expression Complexity	*
H Unchecked Input for Loop Condition	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Preservation of Permissions	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M Cross-site Scripting (XSS)	*
L Time-of-check Time-of-use (TOCTOU)	*
M Improper Validation of Specified Type of Input	*
H Missing Release of Resource after Effective Lifetime	*
M Open Redirect	*
M Improper Output Neutralization for Logs	*
M Cross-site Scripting (XSS)	*
H Improper Preservation of Permissions	*
L Missing Release of Resource after Effective Lifetime	*
M Cross-site Scripting (XSS)	*
M Integer Overflow or Wraparound	*
M Improper Neutralization of Equivalent Special Elements	*
H Improper Validation of Unsafe Equivalence in Input	*
H Incorrect Implementation of Authentication Algorithm	*
M Improper Validation of Unsafe Equivalence in Input	*
H Release of Invalid Pointer or Reference	*
H CVE-2026-33811	*
M Improper Validation of Unsafe Equivalence in Input	*
L Out-of-bounds Write	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Arbitrary Code Injection	*
M Buffer Overflow	*
M Open Redirect	*
M SQL Injection	*
M Incorrect Privilege Assignment	*
M Out-of-bounds Write	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M HTTP Request Smuggling	*

Vulnerability

Vulnerable Version

Improper Certificate Validation