openstack-ironic-api

Direct Vulnerabilities

Known vulnerabilities in the openstack-ironic-api package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Arbitrary Code Injection	*
M Directory Traversal	*
M Directory Traversal	*
M Arbitrary Code Injection	*
M Information Exposure	*
M Information Exposure	*
H Multiple Locks of a Critical Resource	<1:17.1.1-17.1.20260721220909.c31db88.el9ost
H Time-of-check Time-of-use (TOCTOU)	<1:17.1.1-17.1.20260721220909.c31db88.el9ost
H Allocation of Resources Without Limits or Throttling	<1:17.1.1-17.1.20260721220909.c31db88.el9ost
H Improper Validation of Syntactic Correctness of Input	<1:17.1.1-17.1.20260721220909.c31db88.el9ost
H External Control of File Name or Path	<1:17.1.1-17.1.20260721220909.c31db88.el9ost
H Improper Certificate Validation	<1:17.1.1-17.1.20260721220909.c31db88.el9ost
H Allocation of Resources Without Limits or Throttling	<1:17.1.1-17.1.20260721220909.c31db88.el9ost
M Authorization Bypass Through User-Controlled Key	*
M Authorization Bypass Through User-Controlled Key	*
M Improper Certificate Validation	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Validation of Array Index	<1:17.0.4-0.20210713221218.a415e7e.el8
M Incorrect Calculation	<1:17.0.4-0.20210713221218.a415e7e.el8
M Time-of-check Time-of-use (TOCTOU)	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Input Validation	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Input Validation	<1:17.0.4-0.20210713221218.a415e7e.el8
M Cross-site Scripting (XSS)	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Preservation of Permissions	<1:17.0.4-0.20210713221218.a415e7e.el8
M Cross-site Request Forgery (CSRF)	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Preservation of Permissions	<1:17.0.4-0.20210713221218.a415e7e.el8
M XML External Entity (XXE) Injection	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Input Validation	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Input Validation	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Check for Dropped Privileges	<1:17.0.4-0.20210713221218.a415e7e.el8
M Cross-site Scripting (XSS)	<1:17.0.4-0.20210713221218.a415e7e.el8
M Cross-site Scripting (XSS)	<1:17.0.4-0.20210713221218.a415e7e.el8
M Incorrect Authorization	<1:17.0.4-0.20210713221218.a415e7e.el8
M Cross-site Scripting (XSS)	<1:17.0.4-0.20210713221218.a415e7e.el8
M Allocation of Resources Without Limits or Throttling	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Input Validation	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Input Validation	<1:17.0.4-0.20210713221218.a415e7e.el8
M Deserialization of Untrusted Data	<1:17.0.4-0.20210713221218.a415e7e.el8
M Cross-site Scripting (XSS)	<1:17.0.4-0.20210713221218.a415e7e.el8
M Link Following	<1:17.0.4-0.20210713221218.a415e7e.el8
M Resource Exhaustion	<1:17.0.4-0.20210713221218.a415e7e.el8
M Improper Locking	<1:17.0.4-0.20210713221218.a415e7e.el8
L Directory Traversal	<1:13.0.3-0.20191217040142.3e39d7b.el8ost
H Insufficient Granularity of Access Control	*
M Information Exposure	*
M Information Exposure	*
M Directory Traversal	*
M Directory Traversal	*
H Information Exposure	*
M OS Command Injection	*
M OS Command Injection	*
M Uncontrolled Search Path Element	*
M Uncontrolled Search Path Element	*
M Improper Validation of Integrity Check Value	<1:17.1.1-17.1.20241122190825.c31db88.el9ost
H Information Exposure	<1:17.1.1-17.1.20240917210749.c31db88.el9ost
H Information Exposure	*
H Information Exposure	<1:13.0.8-2.20230713045150.d10fd5c.el8ost

Vulnerability

Vulnerable Version

Arbitrary Code Injection