cockpit-image-builder

Direct Vulnerabilities

Known vulnerabilities in the cockpit-image-builder package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Unchecked Input for Loop Condition

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Improper Neutralization

<0:94.4-1.el10_2
  • H
Improper Neutralization of Equivalent Special Elements

<0:94.4-1.el10_2
  • H
Improper Neutralization

<0:94.4-1.el10_2
  • H
Server-Side Request Forgery (SSRF)

<0:94.4-1.el10_2
  • H
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Handling of Case Sensitivity

*
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • L
Unchecked Input for Loop Condition

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Cross-site Scripting (XSS)

*
  • H
HTTP Request Smuggling

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Expression Language Injection

*
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Deserialization of Untrusted Data

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:94.3-1.el10_2
  • H
Arbitrary Code Injection

<0:94.3-1.el10_2
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*