openshift4/ose-hyperkube-rhel9

Direct Vulnerabilities

Known vulnerabilities in the openshift4/ose-hyperkube-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
H Creation of Immutable Text Using String Concatenation	*
M Information Exposure	*
M Allocation of Resources Without Limits or Throttling	*
M Insufficient Granularity of Access Control	*
M Deadlock	*
M Deadlock	*
M HTTP Request Smuggling	*
H Origin Validation Error	*
H Allocation of Resources Without Limits or Throttling	*
H Unchecked Input for Loop Condition	*
H Incorrect Conversion between Numeric Types	*
M Cross-site Scripting (XSS)	*
M Missing Release of Resource after Effective Lifetime	*
H Cross-site Scripting (XSS)	*
M Excessive Platform Resource Consumption within a Loop	*
M Improperly Implemented Security Check for Standard	*
M Cross-site Scripting (XSS)	*
H NULL Pointer Dereference	*
H Improper Preservation of Permissions	*
L Missing Release of Resource after Effective Lifetime	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
H Allocation of Resources Without Limits or Throttling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
L Race Condition	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Certificate Validation	*
L Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M Server-Side Request Forgery (SSRF)	*
M Resource Exhaustion	*
M Missing Reference to Active Allocated Resource	*
M Creation of Immutable Text Using String Concatenation	*
M Improper Validation of Syntactic Correctness of Input	*
M Missing Authentication for Critical Function	*
M Expected Behavior Violation	*
M Time-of-check Time-of-use (TOCTOU)	*

Vulnerability

Vulnerable Version

HTTP Request Smuggling