puppet | Snyk

Direct Vulnerabilities

Known vulnerabilities in the puppet package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Information Exposure	*
H Information Exposure	*
H Information Exposure	*
H Information Exposure	*
H Information Exposure	*
H Information Exposure	*
L Improper Validation of Certificate with Host Mismatch	*
L Improper Validation of Certificate with Host Mismatch	*
L Improper Validation of Certificate with Host Mismatch	*
M Deserialization of Untrusted Data	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Insecure Temporary File	*
L Insecure Temporary File	*
L Insecure Temporary File	*
L Insecure Temporary File	*
L Improper Authentication	*
L Improper Authentication	*
M Inclusion of Functionality from Untrusted Control Sphere	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Access Restriction Bypass	*
M Access Restriction Bypass	*
M Access Restriction Bypass	*
M Access Restriction Bypass	*
M Insecure Temporary File	*
M Link Following	*
M Link Following	*
M Directory Traversal	*
M Directory Traversal	*
H Improper Input Validation	*
H Improper Input Validation	*
H Link Following	*
H Link Following	*
L Access Restriction Bypass	*
L Access Restriction Bypass	*
L Access Restriction Bypass	*
L Access Restriction Bypass	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
L Improper Access Control	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
M Improper Initialization	*
M Improper Initialization	*
M Improper Initialization	*
L Access Restriction Bypass	*
L Access Restriction Bypass	*
M OS Command Injection	*
M OS Command Injection	*
L CVE-2012-1987	*
L CVE-2012-1987	*
H CVE-2013-2274	*
H CVE-2013-2274	*
M CVE-2013-2275	*
M CVE-2013-2275	*
M Access Restriction Bypass	*
M Access Restriction Bypass	*
L CVE-2013-1654	*
L CVE-2013-1654	*
L CVE-2013-1654	*
L Directory Traversal	*
L Directory Traversal	*
L Access Restriction Bypass	*
L Access Restriction Bypass	*
L Information Exposure	*
L Information Exposure	*
M CVE-2013-4761	*
M CVE-2013-4761	*
M CVE-2013-4761	*
M CVE-2013-4761	*
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
C Deserialization of Untrusted Data	*
C Deserialization of Untrusted Data	*
C Deserialization of Untrusted Data	*
L Missing Authorization	*
L Missing Authorization	*

Vulnerability

Vulnerable Version

Information Exposure