rhceph/grafana-rhel9

Direct Vulnerabilities

Known vulnerabilities in the rhceph/grafana-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Server-Side Request Forgery (SSRF)	*
M Direct Request ('Forced Browsing')	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Server-Side Request Forgery (SSRF)	*
M Allocation of Resources Without Limits or Throttling	*
M Direct Request ('Forced Browsing')	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Origin Validation Error	*
H Improper Certificate Validation	*
H Use of Out-of-range Pointer Offset	*
H Use of Out-of-range Pointer Offset	*
H Cross-site Scripting (XSS)	*
H Directory Traversal	*
M Incorrect Authorization	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Cross-site Scripting (XSS)	*
M Incorrect Authorization	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Directory Traversal	*
M Authorization Bypass Through User-Controlled Key	*
M Authorization Bypass Through User-Controlled Key	*
H Allocation of Resources Without Limits or Throttling	*
H Missing Release of Resource after Effective Lifetime	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
H Improper Preservation of Permissions	*
H Improper Certificate Validation	*
H Link Following	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Certificate Validation	*
M Operator Precedence Logic Error	*
H Out-of-bounds Read	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Certificate Validation	*
H Out-of-bounds Read	*
M Operator Precedence Logic Error	*
M Uncaught Exception	*
H Allocation of Resources Without Limits or Throttling	*
M Uncaught Exception	*
H Allocation of Resources Without Limits or Throttling	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
H Improper Validation of Specified Type of Input	*
H Improper Validation of Specified Index, Position, or Offset in Input	*
M Deadlock	*
H Improper Validation of Specified Index, Position, or Offset in Input	*
H Origin Validation Error	*
M NULL Pointer Dereference	*
H Authorization Bypass Through User-Controlled Key	*
M NULL Pointer Dereference	*
H Missing Authentication for Critical Function	*
M Resource Exhaustion	*
H Missing Authentication for Critical Function	*
M Deadlock	*
H Authorization Bypass Through User-Controlled Key	*
M Resource Exhaustion	*
H Missing Authentication for Critical Function	*
H Missing Authentication for Critical Function	*
H Excessive Platform Resource Consumption within a Loop	*
H Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
M Improper Access Control	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Allocation of Resources Without Limits or Throttling	*
H Unchecked Input for Loop Condition	*
H Allocation of Resources Without Limits or Throttling	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Unchecked Input for Loop Condition	*
H Time-of-check Time-of-use (TOCTOU)	*
H Time-of-check Time-of-use (TOCTOU)	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Integer Overflow or Wraparound	*
H Integer Overflow or Wraparound	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Permissive Whitelist	*
M Privilege Defined With Unsafe Actions	*
M Permissive Whitelist	*
M Privilege Defined With Unsafe Actions	*
M Improper Handling of Case Sensitivity	*
H Link Following	*
H Link Following	*
M Improper Handling of Case Sensitivity	*
M Information Exposure	*
M Improper Authentication	*
M Improper Authentication	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Integer Overflow or Wraparound	*
M Missing Release of Resource after Effective Lifetime	*
M Missing Release of Resource after Effective Lifetime	*
M Cross-site Scripting (XSS)	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Excessive Platform Resource Consumption within a Loop	*
M Excessive Platform Resource Consumption within a Loop	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Implemented Security Check for Standard	*
M Improperly Implemented Security Check for Standard	*
H Uncontrolled Search Path Element	*
H Plaintext Storage of a Password	*
H Plaintext Storage of a Password	*
H Uncontrolled Search Path Element	*
M Directory Traversal	*
M Directory Traversal	*
L Time-of-check Time-of-use (TOCTOU)	*
L Time-of-check Time-of-use (TOCTOU)	*
M Improper Output Neutralization for Logs	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Authorization Bypass Through User-Controlled Key	*
M Authorization Bypass Through User-Controlled Key	*
L Missing Release of Resource after Effective Lifetime	*
H Improper Validation of Unsafe Equivalence in Input	*
H Release of Invalid Pointer or Reference	*
M Insufficient Granularity of Access Control	*
M Allocation of Resources Without Limits or Throttling	*
M SQL Injection	*
M Allocation of Resources Without Limits or Throttling	*
M Authorization Bypass Through User-Controlled Key	*
M Least Privilege Violation	*
M SQL Injection	*
M Missing Required Cryptographic Step	*
H OS Command Injection	*
M Improper Certificate Validation	*
M Resource Exhaustion	*
M Insufficient Granularity of Access Control	*
M Insufficient Granularity of Access Control	*
M Directory Traversal	*
L Time-of-check Time-of-use (TOCTOU)	*
L Time-of-check Time-of-use (TOCTOU)	*
M Directory Traversal	*
M Directory Traversal	*
M Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Directory Traversal	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Authorization Bypass Through User-Controlled Key	*
H Authorization Bypass Through User-Controlled Key	*
H Authorization Bypass Through User-Controlled Key	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H File and Directory Information Exposure	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Check or Handling of Exceptional Conditions	*
M Improper Certificate Validation	*
H Excessive Platform Resource Consumption within a Loop	*
L Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
L Inefficient Regular Expression Complexity	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Incorrect Behavior Order: Early Validation	*
M Integer Overflow or Wraparound	*
H OS Command Injection	*
H Resource Exhaustion	*
H OS Command Injection	*
M Uncontrolled Recursion	*
M Resource Exhaustion	*
M Improper Validation of Syntactic Correctness of Input	*
M Creation of Immutable Text Using String Concatenation	*
M Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Race Condition	*
M Race Condition	*
M Race Condition	*
M Allocation of Resources Without Limits or Throttling	*
M Time-of-check Time-of-use (TOCTOU)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
L Improper Validation of Specified Type of Input	*
L Improper Validation of Specified Type of Input	*
L Improper Validation of Specified Type of Input	*
L Missing Initialization of Resource	*
M Missing Initialization of Resource	*
M Missing Initialization of Resource	*
L Missing Initialization of Resource	*
L Missing Initialization of Resource	*
M Missing Initialization of Resource	*
M Information Exposure	*
L Improper Input Validation	*
L Improper Input Validation	*
L Improper Input Validation	*

Vulnerability

Vulnerable Version

Server-Side Request Forgery (SSRF)