Direct Vulnerabilities

Known vulnerabilities in the xstream package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Deserialization of Untrusted Data

<0:1.3.1-12.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-14.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Server-Side Request Forgery (SSRF)

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Server-Side Request Forgery (SSRF)

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • M
Out-of-bounds Write

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Server-Side Request Forgery (SSRF)

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Server-Side Request Forgery (SSRF)

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-16.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-14.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-13.el7_9
  • H
Deserialization of Untrusted Data

<0:1.3.1-12.el7_9
  • M
Deserialization of Untrusted Data

*
  • M
Server-Side Request Forgery (SSRF)

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Deserialization of Untrusted Data

*
  • M
Server-Side Request Forgery (SSRF)

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
OS Command Injection

*
  • M
Server-Side Request Forgery (SSRF)

*
  • M
Improper Input Validation

*
  • M
XML External Entity (XXE) Injection

*