cri-o | Snyk

Direct Vulnerabilities

Known vulnerabilities in the cri-o package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Integer Overflow or Wraparound	*
M Allocation of Resources Without Limits or Throttling	*
M Reliance on Untrusted Inputs in a Security Decision	*
M Missing Release of Resource after Effective Lifetime	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
M HTTP Request Smuggling	*
L Link Following	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Link Following	*
H Trust Boundary Violation	*
M Directory Traversal	*
M Directory Traversal	*
H Execution with Unnecessary Privileges	*
H Out-of-bounds Read	*
M Missing Release of Resource after Effective Lifetime	*
M Uncaught Exception	*
H Improper Validation of Specified Type of Input	*
M Deadlock	*
M Deadlock	*
M Directory Traversal	*
L Missing Release of Resource after Effective Lifetime	*
M Improper Validation of Specified Type of Input	*
M Trust Boundary Violation	*
M Improper Verification of Source of a Communication Channel	*
M Origin Validation Error	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Out-of-bounds Read	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Improperly Implemented Security Check for Standard	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M Improper Validation of Specified Type of Input	*
M Improper Output Neutralization for Logs	*
M Improper Validation of Unsafe Equivalence in Input	*
M Open Redirect	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
L Improper Validation of Specified Quantity in Input	*
H Improper Certificate Validation	*
M Open Redirect	*
M Improper Certificate Validation	*
M Improper Validation of Integrity Check Value	*
M Directory Traversal	*
M Resource Exhaustion	*
M Missing Reference to Active Allocated Resource	*
M Server-Side Request Forgery (SSRF)	*
H Excessive Platform Resource Consumption within a Loop	*
M Improper Certificate Validation	*
M Creation of Immutable Text Using String Concatenation	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Allocation of Resources Without Limits or Throttling	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Allocation of Resources Without Limits or Throttling	*
M Time-of-check Time-of-use (TOCTOU)	*
M Allocation of Resources Without Limits or Throttling	*
M Information Exposure	*
L Improper Verification of Cryptographic Signature	*
M Information Exposure	*
M Information Exposure	*
L Incorrect Authorization	*
L Incorrect Authorization	*
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Allocation of Resources Without Limits or Throttling	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
M Improper Authorization	*
L Race Condition	*
H Resource Exhaustion	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Integer Overflow or Wraparound	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Incorrect Default Permissions	*
H Resource Exhaustion	*
L Improper Access Control	*
L Incorrect Default Permissions	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Use After Free	*
M Incorrect Permission Assignment for Critical Resource	*
M Incorrect Calculation	*
M Allocation of Resources Without Limits or Throttling	*
H Directory Traversal	*

Vulnerability

Vulnerable Version

Integer Overflow or Wraparound