ignition | Snyk

Direct Vulnerabilities

Known vulnerabilities in the ignition package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Validation of Unsafe Equivalence in Input	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M Excessive Platform Resource Consumption within a Loop	*
M Excessive Platform Resource Consumption within a Loop	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Incorrect Calculation of Buffer Size	*
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
H Improper Certificate Validation	*
H Improper Certificate Validation	*
H Improper Validation of Syntactic Correctness of Input	*
H Improper Validation of Syntactic Correctness of Input	*
H Allocation of Resources Without Limits or Throttling	*
M CVE-2025-68121	*
H Allocation of Resources Without Limits or Throttling	*
H Excessive Platform Resource Consumption within a Loop	*
H Excessive Platform Resource Consumption within a Loop	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Creation of Immutable Text Using String Concatenation	*
M Creation of Immutable Text Using String Concatenation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M CVE-2025-4673	*
M CVE-2025-4673	*
L Improper Verification of Cryptographic Signature	*
M Improper Input Validation	*
M HTTP Request Smuggling	*
M Information Exposure	*
M Information Exposure	*
H Resource Exhaustion	*
H Improper Validation of Syntactic Correctness of Input	*
L Improper Verification of Cryptographic Signature	*
M Information Exposure	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Integer Overflow or Wraparound	*
M Improper Certificate Validation	*
M Allocation of Resources Without Limits or Throttling	*
M Buffer Access with Incorrect Length Value	*
M Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	*
M Arbitrary Code Injection	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Directory Traversal	*
M HTTP Request Smuggling	*
M Resource Exhaustion	*
M Use of Uninitialized Variable	*
M Incorrect Privilege Assignment	*
M HTTP Request Smuggling	*

Vulnerability

Vulnerable Version

HTTP Request Smuggling