rhceph/grafana-rhel10

Direct Vulnerabilities

Known vulnerabilities in the rhceph/grafana-rhel10 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Server-Side Request Forgery (SSRF)

*
  • M
Direct Request ('Forced Browsing')

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Deadlock

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Improper Certificate Validation

*
  • H
Origin Validation Error

*
  • H
Use of Out-of-range Pointer Offset

*
  • H
Cross-site Scripting (XSS)

*
  • H
Directory Traversal

*
  • M
Incorrect Authorization

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Authorization Bypass Through User-Controlled Key

*
  • H
Link Following

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Improper Certificate Validation

*
  • M
Operator Precedence Logic Error

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Improper Validation of Specified Type of Input

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • H
Improper Validation of Specified Index, Position, or Offset in Input

*
  • H
Origin Validation Error

*
  • H
Missing Authentication for Critical Function

*
  • M
Resource Exhaustion

*
  • M
Deadlock

*
  • H
Authorization Bypass Through User-Controlled Key

*
  • H
Missing Authentication for Critical Function

*
  • M
Improper Access Control

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Unchecked Input for Loop Condition

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • H
Integer Overflow or Wraparound

*
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Privilege Defined With Unsafe Actions

*
  • M
Permissive Whitelist

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Handling of Case Sensitivity

*
  • M
Improper Authentication

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Cross-site Scripting (XSS)

*
  • M
Integer Overflow or Wraparound

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Excessive Platform Resource Consumption within a Loop

*
  • M
Improperly Implemented Security Check for Standard

*
  • M
Cross-site Scripting (XSS)

*
  • H
Plaintext Storage of a Password

*
  • H
Uncontrolled Search Path Element

*
  • M
Directory Traversal

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • M
Authorization Bypass Through User-Controlled Key

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Release of Invalid Pointer or Reference

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
SQL Injection

*
  • M
Use of a Non-reentrant Function in a Concurrent Context

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Insufficient Granularity of Access Control

*
  • M
Authorization Bypass Through User-Controlled Key

*
  • M
Least Privilege Violation

*
  • M
Buffer Overflow

*
  • M
SQL Injection

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Integer Overflow or Wraparound

*
  • M
Authorization Bypass Through User-Controlled Key

*
  • H
Information Exposure

*