skopeo | Snyk

Direct Vulnerabilities

Known vulnerabilities in the skopeo package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Validation of Unsafe Equivalence in Input	*
M Time-of-check Time-of-use (TOCTOU)	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Excessive Platform Resource Consumption within a Loop	*
M Out-of-bounds Read	*
H Incorrect Calculation of Buffer Size	*
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
M NULL Pointer Dereference	*
H Improper Certificate Validation	*
H Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
M CVE-2025-68121	*
H Allocation of Resources Without Limits or Throttling	*
M Server-Side Request Forgery (SSRF)	*
M Improper Certificate Validation	*
H Excessive Platform Resource Consumption within a Loop	*
L CVE-2025-58186	*
M Resource Exhaustion	*
M Reachable Assertion	*
M Creation of Immutable Text Using String Concatenation	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M CVE-2025-4673	*
M CVE-2025-4673	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Improper Input Validation	*
M Improper Input Validation	*
M Allocation of Resources Without Limits or Throttling	*
M Information Exposure	*
M Information Exposure	*
L Improper Verification of Cryptographic Signature	*
M Information Exposure	*
L Improper Verification of Cryptographic Signature	*
M Directory Traversal	*
H Directory Traversal	*
H Directory Traversal	*
M Use of Uninitialized Variable	*
M Use of Uninitialized Variable	*
H Uncontrolled Recursion	*
M Information Exposure Through Log Files	*
M Improper Validation of Integrity Check Value	*
M Improper Validation of Integrity Check Value	*
M Improper Validation of Integrity Check Value	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Memory Leak	*
H Memory Leak	*
M Resource Exhaustion	*
M Improper Handling of Highly Compressed Data (Data Amplification)	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
M Information Exposure	*
M Resource Exhaustion	*
M Buffer Access with Incorrect Length Value	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	*
M Improper Handling of Unicode Encoding	*
M Improper Handling of Unicode Encoding	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
M Arbitrary Code Injection	*
M Resource Exhaustion	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
M Allocation of Resources Without Limits or Throttling	*
M CVE-2022-41715	*
M Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
M Directory Traversal	*
M Resource Exhaustion	*
L Resource Exhaustion	*
M Improperly Controlled Sequential Memory Allocation	*
L Insufficient Entropy	*
L Insufficient Entropy	*
L Insufficient Entropy	*
M Missing Release of Resource after Effective Lifetime	*
M Integer Overflow or Wraparound	*
M Resource Exhaustion	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	<1:0.1.40-12.el7_9
L Resource Exhaustion	<1:0.1.40-11.el7_8
M Incorrect Calculation	*
M Improper Locking	*
M Improper Locking	*
M Use After Free	<1:0.1.40-7.el7_8

Vulnerability

Vulnerable Version

Improper Validation of Unsafe Equivalence in Input