coreos-installer vulnerabilities

Known vulnerabilities in the coreos-installer package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Improper Validation of Unsafe Equivalence in Input	*
M Double Free	*
H Resource Exhaustion	<0:0.17.0-1.rhaos4.14.el9
H Resource Exhaustion	<0:0.17.0-1.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:0.17.0-1.rhaos4.14.el9
H Resource Exhaustion	<0:0.17.0-1.rhaos4.14.el9
H Allocation of Resources Without Limits or Throttling	<0:0.17.0-1.rhaos4.14.el9
H CVE-2023-39321	<0:0.17.0-1.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:0.17.0-1.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:0.17.0-1.rhaos4.14.el9
H Resource Exhaustion	<0:0.17.0-1.rhaos4.14.el9
H Resource Exhaustion	<0:0.17.0-1.rhaos4.14.el9
H Use of a Broken or Risky Cryptographic Algorithm	<0:0.17.0-1.rhaos4.14.el9
H Use After Free	<0:0.17.0-1.rhaos4.14.el9
H CVE-2023-2728	<0:0.17.0-1.rhaos4.14.el9
H CVE-2023-2727	<0:0.17.0-1.rhaos4.14.el9
H Resource Exhaustion	<0:0.17.0-1.rhaos4.14.el9
M Improper Certificate Validation	<0:0.16.1-1.rhaos4.12.el9
M Incorrect Default Permissions	<0:0.16.1-1.rhaos4.12.el9
M Improper Initialization	<0:0.16.1-1.rhaos4.12.el9
M Server-Side Request Forgery (SSRF)	<0:0.16.1-1.rhaos4.12.el9
M Directory Traversal	<0:0.16.1-1.rhaos4.12.el9
M Improper Access Control	<0:0.16.1-1.rhaos4.12.el9
M Resource Exhaustion	<0:0.16.1-1.rhaos4.12.el9
M Improper Verification of Cryptographic Signature	*
M CVE-2022-41715	<0:0.16.1-1.rhaos4.12.el9
M Allocation of Resources Without Limits or Throttling	<0:0.16.1-1.rhaos4.12.el9
M HTTP Request Smuggling	<0:0.16.1-1.rhaos4.12.el9
M Directory Traversal	<0:0.16.1-1.rhaos4.12.el9
M Resource Exhaustion	<0:0.16.1-1.rhaos4.12.el9
M Resource Exhaustion	<0:0.16.1-1.rhaos4.12.el9
M Information Exposure	<0:0.16.1-1.rhaos4.12.el9
M Improperly Controlled Sequential Memory Allocation	<0:0.16.1-1.rhaos4.12.el9
M HTTP Request Smuggling	<0:0.16.1-1.rhaos4.12.el9
M Incorrect Default Permissions	*

Vulnerability

Vulnerable Version

Improper Validation of Unsafe Equivalence in Input