ose-aws-ecr-image-credential-provider

Direct Vulnerabilities

Known vulnerabilities in the ose-aws-ecr-image-credential-provider package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
M HTTP Request Smuggling	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
L Link Following	*
H Out-of-bounds Read	*
M Uncaught Exception	*
H Excessive Platform Resource Consumption within a Loop	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Unchecked Input for Loop Condition	*
M Information Exposure	*
H Excessive Platform Resource Consumption within a Loop	*
H Unchecked Input for Loop Condition	*
H Creation of Immutable Text Using String Concatenation	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M Improper Output Neutralization for Logs	*
L Missing Release of Resource after Effective Lifetime	*
H Improper Validation of Unsafe Equivalence in Input	*
M Improper Validation of Unsafe Equivalence in Input	*
H CVE-2026-33811	*
M HTTP Request Smuggling	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Validation of Unsafe Equivalence in Input	*
M Cross-site Scripting (XSS)	*
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
M NULL Pointer Dereference	*
H Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Certificate Validation	*
M Directory Traversal	*
M Improper Certificate Validation	*
L Allocation of Resources Without Limits or Throttling	*
M Reachable Assertion	*
M Creation of Immutable Text Using String Concatenation	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Time-of-check Time-of-use (TOCTOU)	*
M Information Exposure	*
M HTTP Request Smuggling	*
M Improper Input Validation	*
M Information Exposure	*
L Improper Verification of Cryptographic Signature	*
M Misinterpretation of Input	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Memory Leak	*
M Improper Certificate Validation	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Input Validation	*

ose-aws-ecr-image-credential-provider

Direct Vulnerabilities

Fix vulnerabilities automatically