openshift | Snyk

Direct Vulnerabilities

Known vulnerabilities in the openshift package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Missing Authentication for Critical Function	*
H Excessive Platform Resource Consumption within a Loop	<0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10
H Excessive Platform Resource Consumption within a Loop	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Cross-site Scripting (XSS)	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
H Unchecked Input for Loop Condition	*
M Out-of-bounds Read	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Implemented Security Check for Standard	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M Information Exposure	*
M External Control of Assumed-Immutable Web Parameter	*
M Improper Validation of Specified Type of Input	*
M Improper Output Neutralization for Logs	*
M Improper Validation of Unsafe Equivalence in Input	*
M Allocation of Resources Without Limits or Throttling	*
H Write-what-where Condition	<0:4.21.0-202605142021.p2.geab2218.assembly.stream.el10
M Open Redirect	*
M Server-Side Request Forgery (SSRF)	*
M HTTP Request Smuggling	*
M Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M Allocation of Resources Without Limits or Throttling	*
L Improper Validation of Specified Quantity in Input	*
M Missing Reference to Active Allocated Resource	*
M Improper Validation of Integrity Check Value	*
H Improper Certificate Validation	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Expected Behavior Violation	*
M Allocation of Resources Without Limits or Throttling	*
M Creation of Immutable Text Using String Concatenation	*
M Improper Certificate Validation	*
M Directory Traversal	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Expected Behavior Violation	*
M Missing Authentication for Critical Function	*
M Time-of-check Time-of-use (TOCTOU)	*
M CVE-2025-4673	*
L Incorrect Authorization	*
M Resource Exhaustion	*
L Placement of User into Incorrect Group	*
L Improper Verification of Cryptographic Signature	*
M Information Exposure	*
M Improper Handling of Highly Compressed Data (Data Amplification)	*
L Incorrect Authorization	*
L Incorrect Authorization	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Truncation of Security-relevant Information	*
M Improper Input Validation	*
M Missing Release of Resource after Effective Lifetime	*
L Improper Handling of Exceptional Conditions	*
L Insufficient Entropy	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Information Exposure	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Resource Exhaustion	*
M Buffer Access with Incorrect Length Value	*
M Cross-site Scripting (XSS)	*
M Improperly Controlled Sequential Memory Allocation	*
M Resource Exhaustion	*
L NULL Pointer Dereference	*
M Use of Uninitialized Variable	*
M Resource Exhaustion	*
M Use of a Broken or Risky Cryptographic Algorithm	*
M Algorithmic Complexity	*
M Unchecked Return Value	*
M OS Command Injection	*
C Authentication Bypass by Primary Weakness	*
L Arbitrary Code Injection	*
L Incorrect Authorization	*
M Incorrect Default Permissions	*
L Improper Input Validation	*
M Resource Exhaustion	*
L Time-of-check Time-of-use (TOCTOU)	*
M Incorrect Privilege Assignment	*
L Missing Authorization	*
L Resource Exhaustion	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Out-of-bounds Write	*
L Improper Preservation of Permissions	*
L Inappropriate Encoding for Output Context	*
H Authorization Bypass Through User-Controlled Key	*

Vulnerability

Vulnerable Version

Missing Authentication for Critical Function