etcd | Snyk

Direct Vulnerabilities

Known vulnerabilities in the etcd package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Out-of-bounds Write	<0:3.7.2-0.1.hum1
M Allocation of Resources Without Limits or Throttling	*
M Missing Release of Resource after Effective Lifetime	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:3.7.2-0.2.hum1
M Race Condition	*
M Race Condition	*
M Race Condition	*
M Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
M Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
M Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
L Link Following	*
L Link Following	*
L Link Following	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Authorization Bypass Through User-Controlled Key	<0:3.7.1-0.1.hum1
M Improper Certificate Validation	<0:3.7.1-0.1.hum1
H Allocation of Resources Without Limits or Throttling	<0:3.7.1-0.1.hum1
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
M Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Excessive Platform Resource Consumption within a Loop	*
H Excessive Platform Resource Consumption within a Loop	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Authorization Bypass Through User-Controlled Key	*
M Authorization Bypass Through User-Controlled Key	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:3.7.0-0.3.hum1
M Out-of-bounds Read	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Information Exposure	*
M Information Exposure	*
H CVE-2026-33811	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M External Control of Assumed-Immutable Web Parameter	*
M Improper Output Neutralization for Logs	*
M Improper Output Neutralization for Logs	*
H Improper Validation of Unsafe Equivalence in Input	*
M Improper Validation of Unsafe Equivalence in Input	*
M Improper Validation of Unsafe Equivalence in Input	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Authorization Bypass Through User-Controlled Key	*
M Authorization Bypass Through User-Controlled Key	*
M Directory Traversal	*
M Directory Traversal	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Creation of Immutable Text Using String Concatenation	*
M Creation of Immutable Text Using String Concatenation	*
M Improper Validation of Syntactic Correctness of Input	*
M Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Improper Output Neutralization for Logs	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M Information Exposure	*
M Information Exposure	*
M Misinterpretation of Input	*
M Misinterpretation of Input	*
M Misinterpretation of Input	*
H Resource Exhaustion	*
H Resource Exhaustion	*
L Improper Verification of Cryptographic Signature	*
L Improper Verification of Cryptographic Signature	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Input Validation	*
M Improper Input Validation	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Buffer Overflow	*
M Buffer Overflow	*
M Buffer Overflow	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Improper Access Control	*
M Resource Exhaustion	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improperly Controlled Sequential Memory Allocation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Uncontrolled Recursion	*
M Information Exposure	*
M Information Exposure	*
M Arbitrary Code Injection	*
M Arbitrary Code Injection	*
M Arbitrary Code Injection	*
M Improper Input Validation	*
H Improper Authentication	*
H Memory Leak	*
H Memory Leak	*
M Unchecked Return Value	*
M Unchecked Return Value	*
L Race Condition	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Improper Input Validation	*
M Race Condition	*
M Race Condition	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Incorrect Privilege Assignment	*
M Incorrect Privilege Assignment	*
L Information Exposure	*
L Information Exposure	*
L Information Exposure	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Cross-site Request Forgery (CSRF)	*
M Improper Access Control	*
M Improper Authentication	*
M Authentication Bypass by Primary Weakness	*
L Authentication Bypass by Primary Weakness	*
M Resource Exhaustion	*
L Resource Exhaustion	*
M Improper Authentication	*
L Improper Authentication	*
M Resource Exhaustion	*
L Resource Exhaustion	*
M Improper Authorization	*
L Improper Authorization	*
M Resource Exhaustion	*
L Resource Exhaustion	*
M Allocation of Resources Without Limits or Throttling	*
M Incorrect Calculation	*
H Resource Exhaustion	*
H Resource Exhaustion	*
M Resource Exhaustion	*

Vulnerability

Vulnerable Version

Out-of-bounds Write

<0:3.7.2-0.1.hum1