rhceph/grafana-rhel9

Direct Vulnerabilities

Known vulnerabilities in the rhceph/grafana-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Origin Validation Error	*
H Improper Certificate Validation	*
M Authorization Bypass Through User-Controlled Key	*
H Use of Out-of-range Pointer Offset	*
H Cross-site Scripting (XSS)	*
H Use of Out-of-range Pointer Offset	*
H Directory Traversal	*
H Directory Traversal	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
M Incorrect Authorization	*
H Allocation of Resources Without Limits or Throttling	*
H Cross-site Scripting (XSS)	*
H Missing Release of Resource after Effective Lifetime	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Authorization Bypass Through User-Controlled Key	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Incorrect Authorization	*
H Improper Preservation of Permissions	*
H Improper Certificate Validation	*
H Link Following	*
M Operator Precedence Logic Error	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Operator Precedence Logic Error	*
H Out-of-bounds Read	*
H Out-of-bounds Read	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Uncaught Exception	*
M Uncaught Exception	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M NULL Pointer Dereference	*
H Missing Authentication for Critical Function	*
M NULL Pointer Dereference	*
M Resource Exhaustion	*
M Resource Exhaustion	*
H Improper Validation of Specified Type of Input	*
M NULL Pointer Dereference	*
M Deadlock	*
M NULL Pointer Dereference	*
M Deadlock	*
H Missing Authentication for Critical Function	*
H Authorization Bypass Through User-Controlled Key	*
H Improper Validation of Specified Index, Position, or Offset in Input	*
H Origin Validation Error	*
H Authorization Bypass Through User-Controlled Key	*
H Improper Validation of Specified Index, Position, or Offset in Input	*
H Missing Authentication for Critical Function	*
H Missing Authentication for Critical Function	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Cross-site Scripting (XSS)	*
H Excessive Platform Resource Consumption within a Loop	*
H Allocation of Resources Without Limits or Throttling	*
H Excessive Platform Resource Consumption within a Loop	*
M Improper Access Control	*
H Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Unchecked Input for Loop Condition	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Unchecked Input for Loop Condition	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Time-of-check Time-of-use (TOCTOU)	*
H Time-of-check Time-of-use (TOCTOU)	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Integer Overflow or Wraparound	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Integer Overflow or Wraparound	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Permissive Whitelist	*
M Privilege Defined With Unsafe Actions	*
M Permissive Whitelist	*
M Privilege Defined With Unsafe Actions	*
M Improper Handling of Case Sensitivity	*
H Link Following	*
H Link Following	*
M Improper Handling of Case Sensitivity	*
M Information Exposure	*
M Improper Authentication	*
M Information Exposure	*
M Improper Authentication	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M Missing Release of Resource after Effective Lifetime	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M Missing Release of Resource after Effective Lifetime	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Excessive Platform Resource Consumption within a Loop	*
M Excessive Platform Resource Consumption within a Loop	*
M Improperly Implemented Security Check for Standard	*
M Improperly Implemented Security Check for Standard	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Uncontrolled Search Path Element	*
H Plaintext Storage of a Password	*
H Uncontrolled Search Path Element	*
H Plaintext Storage of a Password	*
M Directory Traversal	*
M Directory Traversal	*
L Time-of-check Time-of-use (TOCTOU)	*
L Time-of-check Time-of-use (TOCTOU)	*
M Improper Output Neutralization for Logs	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Authorization Bypass Through User-Controlled Key	*
M Authorization Bypass Through User-Controlled Key	*
L Missing Release of Resource after Effective Lifetime	*
H Improper Validation of Unsafe Equivalence in Input	*
H Release of Invalid Pointer or Reference	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Insufficient Granularity of Access Control	*
M SQL Injection	*
M Authorization Bypass Through User-Controlled Key	*
M Least Privilege Violation	*
M SQL Injection	*
M Missing Required Cryptographic Step	*
M Missing Required Cryptographic Step	*
H OS Command Injection	*
M Resource Exhaustion	*
L Time-of-check Time-of-use (TOCTOU)	*
M Resource Exhaustion	*
M Directory Traversal	*
L Time-of-check Time-of-use (TOCTOU)	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Cross-site Scripting (XSS)	*
M Insufficient Granularity of Access Control	*
M Cross-site Scripting (XSS)	*
M Directory Traversal	*
M Directory Traversal	*
M Insufficient Granularity of Access Control	*
M Directory Traversal	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Authorization Bypass Through User-Controlled Key	*
H Authorization Bypass Through User-Controlled Key	*
H Authorization Bypass Through User-Controlled Key	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H File and Directory Information Exposure	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Excessive Platform Resource Consumption within a Loop	*
H Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
L Inefficient Regular Expression Complexity	*
H Allocation of Resources Without Limits or Throttling	*
M Improper Certificate Validation	*
L Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
H Excessive Platform Resource Consumption within a Loop	*
M Improper Certificate Validation	*
M Improper Check or Handling of Exceptional Conditions	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Incorrect Behavior Order: Early Validation	*
M Integer Overflow or Wraparound	*
H OS Command Injection	*
H Resource Exhaustion	*
H OS Command Injection	*
M Resource Exhaustion	*
M Uncontrolled Recursion	*
M Improper Validation of Syntactic Correctness of Input	*
M Improper Validation of Syntactic Correctness of Input	*
M Creation of Immutable Text Using String Concatenation	*
M Creation of Immutable Text Using String Concatenation	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Race Condition	*
M Race Condition	*
M Race Condition	*
M Time-of-check Time-of-use (TOCTOU)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Time-of-check Time-of-use (TOCTOU)	*
L Improper Validation of Specified Type of Input	*
L Improper Validation of Specified Type of Input	*
L Improper Validation of Specified Type of Input	*
M Missing Initialization of Resource	*
L Missing Initialization of Resource	*
M Missing Initialization of Resource	*
L Missing Initialization of Resource	*
L Missing Initialization of Resource	*
M Missing Initialization of Resource	*
M CVE-2025-4673	*
M CVE-2025-4673	*
L Improper Input Validation	*
L Improper Input Validation	*
L Improper Input Validation	*
H Improper Certificate Validation	*

Vulnerability

Vulnerable Version

Allocation of Resources Without Limits or Throttling