Homepage

buildah vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the buildah package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Incorrect Execution-Assigned Permissions

*
  • H
Directory Traversal

<1:1.29.1-5.rhaos4.13.el9
  • H
Directory Traversal

<1:1.29.1-5.rhaos4.13.el9
  • H
Link Following

<1:1.29.1-5.rhaos4.13.el9
  • H
Improperly Controlled Sequential Memory Allocation

<1:1.29.1-5.rhaos4.13.el9
  • H
Uncontrolled Recursion

<1:1.29.1-5.rhaos4.13.el9
  • H
Uncontrolled Recursion

<1:1.29.1-5.rhaos4.13.el9
  • H
Creation of Temporary File With Insecure Permissions

<1:1.29.1-5.rhaos4.13.el9
  • M
Reachable Assertion

*
  • H
CVE-2025-47913

*
  • H
Allocation of Resources Without Limits or Throttling

<2:1.41.6-1.el9_7
  • H
Link Following

<2:1.41.6-1.el9_7
  • H
Allocation of Resources Without Limits or Throttling

<2:1.41.6-1.el9_7
  • H
Link Following

<2:1.41.6-1.el9_7
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.6-1.el9_6
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.6-1.el9_6
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.6-1.el9_6
  • H
Link Following

<2:1.39.5-1.el9_6
  • H
Link Following

<2:1.39.5-1.el9_6
  • H
Link Following

<2:1.39.5-1.el9_6
  • M
Creation of Immutable Text Using String Concatenation

*
  • H
Link Following

<2:1.41.6-1.el9_7
  • H
Allocation of Resources Without Limits or Throttling

<2:1.41.6-1.el9_7
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Output Neutralization for Logs

*
  • M
Expected Behavior Violation

*
  • M
Expected Behavior Violation

*
  • H
Improper Privilege Management

<2:1.37.6-1.el9_5
  • H
Improper Privilege Management

<2:1.37.6-1.el9_5
  • H
Link Following

<1:1.31.5-1.el9_3
  • H
Link Following

<1:1.31.5-1.el9_3
  • H
Link Following

<1:1.31.5-1.el9_3
  • H
Link Following

<1:1.31.5-1.el9_3
  • M
Improper Validation of Integrity Check Value

<2:1.37.2-1.el9
  • M
Improper Input Validation

<2:1.37.2-1.el9
  • M
Improper Validation of Integrity Check Value

<2:1.37.2-1.el9
  • M
Improper Input Validation

<2:1.37.2-1.el9
  • M
Improper Validation of Integrity Check Value

<2:1.37.2-1.el9
  • M
Improper Input Validation

<2:1.37.2-1.el9
  • M
Improper Validation of Integrity Check Value

<2:1.37.2-1.el9
  • M
Improper Input Validation

<2:1.37.2-1.el9
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.4-1.el9_6
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.4-1.el9_6
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Improper Input Validation

<2:1.37.5-1.el9_5
  • H
Link Following

<2:1.37.5-1.el9_5
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.37.5-1.el9_5
  • H
Uncontrolled Recursion

<2:1.37.5-1.el9_5
  • H
Uncontrolled Recursion

<2:1.37.5-1.el9_5
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Improper Input Validation

<2:1.37.5-1.el9_5
  • H
Link Following

<2:1.37.5-1.el9_5
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.37.5-1.el9_5
  • H
Uncontrolled Recursion

<2:1.37.5-1.el9_5
  • H
Uncontrolled Recursion

<2:1.37.5-1.el9_5
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • M
HTTP Request Smuggling

<2:1.39.4-2.el9_6
  • M
HTTP Request Smuggling

<2:1.39.4-2.el9_6
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.4-1.el9_6
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.4-1.el9_6
  • M
HTTP Request Smuggling

<2:1.39.4-2.el9_6
  • H
Improper Privilege Management

<2:1.37.6-1.el9_5
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Improper Input Validation

<2:1.37.5-1.el9_5
  • H
Link Following

<2:1.37.5-1.el9_5
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.37.5-1.el9_5
  • H
Uncontrolled Recursion

<2:1.37.5-1.el9_5
  • H
Uncontrolled Recursion

<2:1.37.5-1.el9_5
  • M
HTTP Request Smuggling

<2:1.39.4-2.el9_6
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Improper Input Validation

<2:1.37.5-1.el9_5
  • H
Link Following

<2:1.37.5-1.el9_5
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.37.5-1.el9_5
  • H
Uncontrolled Recursion

<2:1.37.5-1.el9_5
  • H
Uncontrolled Recursion

<2:1.37.5-1.el9_5
  • H
Improper Privilege Management

<2:1.37.6-1.el9_5
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • H
Link Following

<1:1.31.5-1.el9_3
  • H
Link Following

<1:1.31.5-1.el9_3
  • H
Link Following

<1:1.31.5-1.el9_3
  • M
CVE-2025-4673

*
  • M
HTTP Request Smuggling

<2:1.39.4-2.el9_6
  • M
HTTP Request Smuggling

<1:1.26.9-1.el9_0.1
  • M
HTTP Request Smuggling

<1:1.29.5-1.el9_2.1
  • M
HTTP Request Smuggling

<2:1.33.12-2.el9_4.1
  • M
HTTP Request Smuggling

<2:1.33.12-2.el9_4.1
  • M
HTTP Request Smuggling

<2:1.33.12-2.el9_4.1
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.4-1.el9_6
  • H
Improper Authorization

<2:1.33.12-1.rhaos4.18.el9
  • H
Improper Privilege Management

<2:1.33.12-1.rhaos4.18.el9
  • M
HTTP Request Smuggling

*
  • L
Incorrect Authorization

*
  • L
Incorrect Authorization

*
  • H
Improper Privilege Management

<1:1.29.5-1.rhaos4.14.el9
  • H
Improper Privilege Management

<1:1.29.5-1.rhaos4.13.el9
  • M
Improper Input Validation

*
  • H
Improper Privilege Management

<1:1.29.5-1.rhaos4.15.el9
  • H
Improper Privilege Management

<2:1.33.12-2.el9_4
  • H
Improper Privilege Management

<2:1.33.12-2.el9_4
  • M
Improper Validation of Integrity Check Value

<2:1.37.2-1.el9
  • M
Improper Input Validation

<2:1.37.2-1.el9
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • H
Improper Privilege Management

<2:1.37.6-1.el9_5
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • H
Directory Traversal

<2:1.33.10-1.el9_4
  • M
Directory Traversal

<2:1.33.11-1.el9_4
  • M
Improper Input Validation

<2:1.33.11-1.el9_4
  • H
Directory Traversal

<2:1.33.10-1.el9_4
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • M
Directory Traversal

<2:1.33.11-1.el9_4
  • M
Improper Input Validation

<2:1.33.11-1.el9_4
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • H
Link Following

<2:1.33.9-1.el9_4
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Directory Traversal

<2:1.33.10-1.el9_4
  • H
Improper Input Validation

<2:1.37.5-1.el9_5
  • H
Link Following

<2:1.33.9-1.el9_4
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Link Following

<2:1.33.9-1.el9_4
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • H
Improper Privilege Management

<2:1.33.12-1.rhaos4.16.el9
  • H
Improper Privilege Management

<2:1.33.12-1.rhaos4.17.el9
  • M
Allocation of Resources Without Limits or Throttling

<2:1.39.4-1.el9_6
  • H
Improper Privilege Management

<1:1.29.5-1.el9_2
  • H
Improper Privilege Management

<1:1.29.5-1.el9_2
  • H
Improper Privilege Management

<1:1.29.5-1.el9_2
  • H
Improper Privilege Management

<2:1.33.12-2.el9_4
  • H
Improper Privilege Management

<1:1.26.9-1.el9_0
  • L
Improper Verification of Cryptographic Signature

*
  • M
Information Exposure

*
  • H
Improper Privilege Management

<2:1.37.6-1.el9_5
  • M
Directory Traversal

<2:1.33.11-1.el9_4
  • M
Improper Input Validation

<2:1.33.11-1.el9_4
  • H
Directory Traversal

<1:1.29.4-1.el9_2
  • H
Directory Traversal

<1:1.29.4-1.el9_2
  • H
Directory Traversal

<1:1.29.4-1.el9_2
  • H
Directory Traversal

<2:1.33.10-1.el9_4
  • H
Directory Traversal

<1:1.26.8-2.el9_0
  • H
Directory Traversal

<1:1.26.8-2.el9_0
  • H
Directory Traversal

<2:1.37.5-1.el9_5
  • H
Link Following

<2:1.33.9-1.el9_4
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Directory Traversal

<2:1.33.10-1.el9_4
  • H
Uncontrolled Recursion

<1:1.29.3-1.el9_2.1
  • H
Uncontrolled Recursion

<1:1.29.3-1.el9_2.1
  • H
Uncontrolled Recursion

<1:1.29.3-1.el9_2.1
  • H
Uncontrolled Recursion

<1:1.26.7-1.el9_0.1
  • H
Link Following

<2:1.33.9-1.el9_4
  • M
Improper Input Validation

*
  • M
Use of Uninitialized Variable

*
  • M
Link Following

*
  • M
Use of Uninitialized Variable

*
  • H
Improper Input Validation

<2:1.37.5-1.el9_5
  • M
Use of Uninitialized Variable

*
  • M
Improper Input Validation

*
  • H
Improperly Controlled Sequential Memory Allocation

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Uncontrolled Recursion

<2:1.33.9-1.el9_4
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • H
Link Following

<1:1.31.5-1.el9_3
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • H
Resource Exhaustion

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:1.29.1-1.1.rhaos4.13.el9
  • M
Improper Input Validation

<2:1.37.2-1.el9
  • H
Resource Exhaustion

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Cross-site Scripting (XSS)

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Resource Exhaustion

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Allocation of Resources Without Limits or Throttling

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Buffer Access with Incorrect Length Value

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Cross-site Scripting (XSS)

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Cross-site Scripting (XSS)

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Resource Exhaustion

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Resource Exhaustion

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Use After Free

<1:1.29.1-10.1.rhaos4.14.el9
  • H
CVE-2023-2728

<1:1.29.1-10.1.rhaos4.14.el9
  • H
CVE-2023-2727

<1:1.29.1-10.1.rhaos4.14.el9
  • H
Resource Exhaustion

<1:1.29.1-10.1.rhaos4.14.el9
  • M
Improper Validation of Integrity Check Value

<2:1.37.2-1.el9
  • H
Link Following

<1:1.29.3-1.el9_2
  • H
Link Following

<1:1.29.3-1.el9_2
  • H
Link Following

<1:1.29.3-1.el9_2
  • H
Link Following

<1:1.26.7-1.el9_0
  • H
Link Following

<1:1.26.7-1.el9_0
  • H
Memory Leak

<1:1.29.1-2.2.rhaos4.13.el9
  • H
Memory Leak

<1:1.29.1-10.4.rhaos4.14.el9
  • H
Resource Exhaustion

<1:1.29.1-10.4.rhaos4.14.el9
  • H
Improper Handling of Unicode Encoding

<1:1.29.1-1.1.rhaos4.13.el9
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<1:1.23.4-5.2.rhaos4.12.el9
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:1.23.4-5.2.rhaos4.12.el9
  • H
Memory Leak

<1:1.23.4-5.2.rhaos4.12.el9
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<1:1.29.1-20.3.rhaos4.15.el9
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:1.29.1-20.3.rhaos4.15.el9
  • H
Memory Leak

<1:1.29.1-20.3.rhaos4.15.el9
  • H
Improper Handling of Unicode Encoding

<1:1.29.1-1.1.rhaos4.13.el9
  • H
Memory Leak

<2:1.33.7-3.el9_4
  • H
Link Following

<1:1.31.5-1.el9_3
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

<2:1.33.7-2.el9_4
  • M
Resource Exhaustion

<2:1.33.7-2.el9_4
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2:1.33.7-1.el9_4
  • M
Improper Input Validation

<2:1.33.7-4.el9_4
  • M
Improper Input Validation

<2:1.33.7-2.el9_4
  • H
Truncation of Security-relevant Information

<1:1.29.1-20.2.rhaos4.15.el9
  • H
Information Exposure

<1:1.29.1-20.2.rhaos4.15.el9
  • H
Resource Exhaustion

<1:1.29.1-20.2.rhaos4.15.el9
  • H
Resource Exhaustion

<1:1.29.1-20.2.rhaos4.15.el9
  • H
Resource Exhaustion

<1:1.29.1-1.1.rhaos4.13.el9
  • H
Arbitrary Code Injection

<1:1.29.1-1.1.rhaos4.13.el9
  • M
Truncation of Security-relevant Information

<1:1.31.4-1.el9_3
  • M
Information Exposure

<2:1.33.6-2.el9
  • M
Resource Exhaustion

<2:1.33.6-2.el9
  • H
Resource Exhaustion

<1:1.29.1-10.1.rhaos4.14.el9
  • M
Buffer Access with Incorrect Length Value

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Allocation of Resources Without Limits or Throttling

<1:1.31.3-2.el9_3
  • M
Cross-site Scripting (XSS)

<1:1.31.3-2.el9_3
  • M
Resource Exhaustion

<1:1.31.3-2.el9_3
  • M
HTTP Response Splitting

*
  • M
HTTP Response Splitting

<1:1.31.3-1.el9
  • H
Directory Traversal

<1:1.29.1-1.1.rhaos4.13.el9
  • H
Improper Handling of Unicode Encoding

<1:1.29.1-1.1.rhaos4.13.el9
  • H
Improper Handling of Unicode Encoding

<1:1.29.1-1.1.rhaos4.13.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • M
Improper Handling of Unicode Encoding

<1:1.31.3-1.el9
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:1.29.1-1.1.rhaos4.13.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Arbitrary Code Injection

<1:1.31.3-1.el9
  • H
Arbitrary Code Injection

<1:1.29.1-1.1.rhaos4.13.el9
  • H
Resource Exhaustion

<1:1.29.1-1.1.rhaos4.13.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • H
Improper Input Validation

<1:1.29.1-1.rhaos4.13.el9
  • H
Improper Input Validation

<1:1.29.1-1.rhaos4.13.el9
  • M
Improper Certificate Validation

<1:1.23.4-3.rhaos4.12.el9
  • M
Incorrect Default Permissions

<1:1.23.4-3.rhaos4.12.el9
  • H
Improper Initialization

<1:1.29.1-1.rhaos4.13.el9
  • M
Improper Initialization

<1:1.23.4-3.rhaos4.12.el9
  • M
Server-Side Request Forgery (SSRF)

<1:1.23.4-3.rhaos4.12.el9
  • M
Directory Traversal

<1:1.23.4-3.rhaos4.12.el9
  • M
Improper Access Control

<1:1.23.4-3.rhaos4.12.el9
  • M
Resource Exhaustion

<1:1.23.4-3.rhaos4.12.el9
  • M
Improper Validation of Array Index

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Resource Exhaustion

<1:1.29.1-1.rhaos4.13.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • H
Resource Exhaustion

<1:1.29.1-1.rhaos4.13.el9
  • H
Resource Exhaustion

<1:1.29.1-1.rhaos4.13.el9
  • H
Resource Exhaustion

<1:1.29.1-1.1.rhaos4.13.el9
  • M
Resource Exhaustion

<1:1.31.3-1.el9
  • L
Placement of User into Incorrect Group

*
  • M
Placement of User into Incorrect Group

<1:1.31.3-1.el9
  • H
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.rhaos4.13.el9
  • H
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.rhaos4.13.el9
  • H
Time-of-check Time-of-use (TOCTOU)

<1:1.29.1-1.rhaos4.13.el9
  • H
Time-of-check Time-of-use (TOCTOU)

<1:1.29.1-1.rhaos4.13.el9
  • H
HTTP Request Smuggling

<1:1.29.1-1.rhaos4.13.el9
  • H
HTTP Request Smuggling

<1:1.29.1-1.rhaos4.13.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • H
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.rhaos4.13.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.29.1-1.el9
  • M
Resource Exhaustion

<1:1.23.4-4.rhaos4.12.el9
  • H
Resource Exhaustion

<1:1.29.1-1.rhaos4.13.el9
  • M
Link Following

*
  • L
Directory Traversal

*
  • M
CVE-2022-41715

*
  • M
CVE-2022-41715

<1:1.23.4-4.rhaos4.12.el9
  • M
Allocation of Resources Without Limits or Throttling

<1:1.23.4-4.rhaos4.12.el9
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
HTTP Request Smuggling

<1:1.23.4-4.rhaos4.12.el9
  • M
HTTP Request Smuggling

*
  • M
Directory Traversal

<1:1.23.4-3.rhaos4.12.el9
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

<1:1.23.4-3.rhaos4.12.el9
  • H
Placement of User into Incorrect Group

<1:1.29.1-1.rhaos4.13.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • H
Placement of User into Incorrect Group

<1:1.29.1-1.rhaos4.13.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Placement of User into Incorrect Group

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.23.4-3.rhaos4.12.el9
  • L
Resource Exhaustion

*
  • M
Information Exposure

*
  • M
Information Exposure

<1:1.23.4-3.rhaos4.12.el9
  • M
Improperly Controlled Sequential Memory Allocation

*
  • M
Improperly Controlled Sequential Memory Allocation

<1:1.23.4-4.rhaos4.12.el9
  • M
Improperly Controlled Sequential Memory Allocation

*
  • M
Improperly Controlled Sequential Memory Allocation

*
  • M
HTTP Request Smuggling

<1:1.23.4-3.rhaos4.12.el9
  • M
HTTP Request Smuggling

*
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Insufficient Entropy

<1:1.29.1-1.el9
  • M
Integer Overflow or Wraparound

*
  • M
Buffer Overflow

*
  • L
Incorrect Default Permissions

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:1.29.1-1.rhaos4.13.el9
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:1.29.1-1.1.rhaos4.13.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:1.27.0-2.el9
  • M
Resource Exhaustion

*
  • M
Unchecked Return Value

*
  • M
Incorrect Authorization

*
  • M
Integer Overflow or Wraparound

*
  • M
Information Exposure

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Race Condition

*
  • M
Improper Input Validation

*
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Resource Exhaustion

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Improper Input Validation

<1:1.27.0-2.el9
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Incorrect Calculation

*
  • M
Information Exposure

*
  • M
Improper Input Validation

*
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Improper Locking

<1:1.27.0-2.el9
  • M
Improper Input Validation

*