openshift4/ose-agent-installer-ui-rhel9

Direct Vulnerabilities

Known vulnerabilities in the openshift4/ose-agent-installer-ui-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Unchecked Input for Loop Condition

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Information Exposure Through Caching

*
  • H
Information Exposure Through Caching

*
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Inefficient Regular Expression Complexity

*
  • H
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Cross-site Scripting (XSS)

*
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Improper Validation of Specified Type of Input

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • H
Directory Traversal

*
  • M
Cross-site Scripting (XSS)

*
  • H
Link Following

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
NULL Pointer Dereference

*
  • H
Reliance on Untrusted Inputs in a Security Decision

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Inefficient Regular Expression Complexity

*
  • H
Reachable Assertion

*
  • M
Expression Language Injection

*
  • M
CVE-2026-69198

*
  • H
CVE-2026-69192

*
  • M
Directory Traversal

*
  • H
Directory Traversal

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Improper Validation of Unsafe Equivalence in Input

*
  • M
Directory Traversal

*
  • M
Server-Side Request Forgery (SSRF)

*
  • M
Deserialization of Untrusted Data

*
  • M
Open Redirect

*
  • M
Cross-site Scripting (XSS)

*
  • M
Open Redirect

*
  • M
Cross-site Scripting (XSS)

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • H
Cross-site Scripting (XSS)

*
  • H
Unchecked Input for Loop Condition

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Null Termination

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Misinterpretation of Input

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Improper Verification of Source of a Communication Channel

*
  • H
Origin Validation Error

*
  • M
Cross-site Scripting (XSS)

*
  • H
Inefficient Regular Expression Complexity

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

*
  • H
CRLF Injection

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Excessive Platform Resource Consumption within a Loop

*
  • H
Cross-site Scripting (XSS)

*
  • L
Improper Neutralization of Equivalent Special Elements

*
  • L
Cross-site Request Forgery (CSRF)

*
  • H
Excessive Platform Resource Consumption within a Loop

*
  • M
Inappropriate Encoding for Output Context

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Open Redirect

*
  • H
Access of Uninitialized Pointer

*
  • M
CRLF Injection

*
  • L
Improper Validation of Syntactic Correctness of Input

*
  • L
Improper Verification of Source of a Communication Channel

*
  • M
Improper Validation of Syntactic Correctness of Input

*
  • M
Uncontrolled Recursion

*
  • H
Information Exposure

*
  • H
Information Exposure

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • L
Origin Validation Error

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Cross-site Scripting (XSS)

*
  • H
Cross-site Scripting (XSS)

*
  • H
OS Command Injection

*
  • H
XML Injection

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Out-of-bounds Write

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Server-Side Request Forgery (SSRF)

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Comparison Using Wrong Factors

*
  • M
Insufficient Granularity of Access Control

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
CRLF Injection

*
  • L
Out-of-bounds Write

*
  • M
Cross-site Scripting (XSS)

*
  • H
Improper Cross-boundary Removal of Sensitive Data

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Arbitrary Code Injection

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Unchecked Input for Loop Condition

*
  • H
Expression Language Injection

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Unchecked Input for Loop Condition

*
  • H
Improper Validation of Specified Type of Input

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Deserialization of Untrusted Data

*
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • H
Cross-site Scripting (XSS)

*
  • M
Open Redirect

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • M
Use of Incorrectly-Resolved Name or Reference

*