eap8-xsom

Direct Vulnerabilities

Known vulnerabilities in the eap8-xsom package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Authentication Bypass

<0:4.0.7-4.redhat_00001.1.el10eap
  • M
Allocation of Resources Without Limits or Throttling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Allocation of Resources Without Limits or Throttling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Allocation of Resources Without Limits or Throttling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Deserialization of Untrusted Data

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Deserialization of Untrusted Data

<0:4.0.7-4.redhat_00001.1.el10eap
  • M
Missing Authentication for Critical Function

<0:4.0.7-4.redhat_00001.1.el10eap
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<0:4.0.7-4.redhat_00001.1.el10eap
  • M
HTTP Request Smuggling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Allocation of Resources Without Limits or Throttling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Allocation of Resources Without Limits or Throttling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Reliance on Untrusted Inputs in a Security Decision

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Missing Authentication for Critical Function

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Allocation of Resources Without Limits or Throttling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<0:4.0.7-4.redhat_00001.1.el10eap
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Missing Authentication for Critical Function

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Missing Release of Resource after Effective Lifetime

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Integer Overflow or Wraparound

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Improper Certificate Validation

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Improper Certificate Validation

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
XML External Entity (XXE) Injection

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Missing Authentication for Critical Function

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Arbitrary Code Injection

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Allocation of Resources Without Limits or Throttling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Deserialization of Untrusted Data

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Incomplete Blacklist

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
External Control of System or Configuration Setting

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Deserialization of Untrusted Data

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Allocation of Resources Without Limits or Throttling

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
CVE-2026-15567

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Buffer Overflow

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Missing Authentication for Critical Function

<0:4.0.7-4.redhat_00001.1.el10eap
  • H
Missing Release of Resource after Effective Lifetime

<0:4.0.7-4.redhat_00001.1.el10eap
  • M
Cross-site Scripting (XSS)

<0:4.0.6-1.redhat_00001.1.el10eap