openshift4/ose-docker-builder-rhel9

Direct Vulnerabilities

Known vulnerabilities in the openshift4/ose-docker-builder-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling	*
M Symlink Following	*
H Out-of-bounds Read	*
M Missing Release of Resource after Effective Lifetime	*
M Directory Traversal	*
H Improper Validation of Specified Type of Input	*
M Allocation of Resources Without Limits or Throttling	*
M Directory Traversal	*
M Reliance on Untrusted Inputs in a Security Decision	*
M Deadlock	*
M Deadlock	*
H Origin Validation Error	*
M Directory Traversal	*
H Unchecked Input for Loop Condition	*
M Server-Side Request Forgery (SSRF)	*
H Incorrect Conversion between Numeric Types	*
M Cross-site Scripting (XSS)	*
H Improper Verification of Cryptographic Signature	*
M Integer Overflow or Wraparound	*
M Missing Release of Resource after Effective Lifetime	*
M Excessive Platform Resource Consumption within a Loop	*
H Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Implemented Security Check for Standard	*
H Improper Preservation of Permissions	*
L Time-of-check Time-of-use (TOCTOU)	*
H Missing Release of Resource after Effective Lifetime	*
M Improper Validation of Specified Type of Input	*
H Improper Validation of Specified Quantity in Input	*
H Improper Preservation of Permissions	*
L Missing Release of Resource after Effective Lifetime	*
M Integer Overflow or Wraparound	*
H Improper Restriction of Names for Files and Other Resources	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
M Allocation of Resources Without Limits or Throttling	*
M Directory Traversal	*
M Server-Side Request Forgery (SSRF)	*
M Server-Side Request Forgery (SSRF)	*
M NULL Pointer Dereference	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Certificate Validation	*
L Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M Server-Side Request Forgery (SSRF)	*
M Missing Reference to Active Allocated Resource	*
M Creation of Immutable Text Using String Concatenation	*
M Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
M Expected Behavior Violation	*
M Allocation of Resources Without Limits or Throttling	*
M Time-of-check Time-of-use (TOCTOU)	*

openshift4/ose-docker-builder-rhel9

Direct Vulnerabilities

Fix vulnerabilities automatically