rhceph/alloy-rhel10

Direct Vulnerabilities

Known vulnerabilities in the rhceph/alloy-rhel10 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Allocation of Resources Without Limits or Throttling	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Unchecked Input for Loop Condition	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Allocation of Resources Without Limits or Throttling	*
H Directory Traversal	*
H Time-of-check Time-of-use (TOCTOU)	*
H Integer Overflow or Wraparound	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
M Deserialization of Untrusted Data	*
M Cross-site Scripting (XSS)	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Inefficient Regular Expression Complexity	*
H Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Directory Traversal	*
H Unchecked Input for Loop Condition	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Information Exposure	*
H Deserialization of Untrusted Data	*
H Allocation of Resources Without Limits or Throttling	*
H Excessive Platform Resource Consumption within a Loop	*
M Cross-site Scripting (XSS)	*
M Integer Overflow or Wraparound	*
M Missing Release of Resource after Effective Lifetime	*
H Improper Verification of Cryptographic Signature	*
H Incorrect Conversion between Numeric Types	*
H Arbitrary Code Injection	*
M Arbitrary Code Injection	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Link Following	*
H OS Command Injection	*
H Unchecked Input for Loop Condition	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Cross-site Scripting (XSS)	*
H Cross-site Scripting (XSS)	*
M Excessive Platform Resource Consumption within a Loop	*
H Creation of Immutable Text Using String Concatenation	*
M Improperly Implemented Security Check for Standard	*
H NULL Pointer Dereference	*
H Unchecked Input for Loop Condition	*
M Cross-site Scripting (XSS)	*
M Inefficient Regular Expression Complexity	*
H Unchecked Input for Loop Condition	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Preservation of Permissions	*
M Cross-site Scripting (XSS)	*
M External Control of Assumed-Immutable Web Parameter	*
M Cross-site Scripting (XSS)	*
L Time-of-check Time-of-use (TOCTOU)	*
M Improper Validation of Specified Type of Input	*
H Missing Release of Resource after Effective Lifetime	*
M Open Redirect	*
M Improper Output Neutralization for Logs	*
H Improper Certificate Validation	*
M Cross-site Scripting (XSS)	*
H Improper Preservation of Permissions	*
H Improper Validation of Specified Quantity in Input	*
L Missing Release of Resource after Effective Lifetime	*
M Integer Overflow or Wraparound	*
M Improper Neutralization of Equivalent Special Elements	*
M Cross-site Scripting (XSS)	*
H Incorrect Implementation of Authentication Algorithm	*
H Improper Validation of Unsafe Equivalence in Input	*
M Improper Validation of Unsafe Equivalence in Input	*
H Release of Invalid Pointer or Reference	*
H CVE-2026-33811	*
H Arbitrary Code Injection	*
M Buffer Overflow	*
M SQL Injection	*
M Open Redirect	*
M Incorrect Privilege Assignment	*
M Out-of-bounds Write	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Integer Overflow or Wraparound	*
M HTTP Request Smuggling	*
M Cross-site Scripting (XSS)	*
L Out-of-bounds Write	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Improper Validation of Unsafe Equivalence in Input	*

Vulnerability

Vulnerable Version

Loop with Unreachable Exit Condition ('Infinite Loop')