rsync | Snyk

Direct Vulnerabilities

Known vulnerabilities in the rsync package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Use of Uninitialized Resource	<3.2.7-150600.3.24.1
M Symlink Following	<3.2.7-150600.3.24.1
H Link Following	<3.2.7-150600.3.24.1
H Out-of-bounds Write	<3.2.7-150600.3.24.1
H Allocation of Resources Without Limits or Throttling	<3.2.7-150600.3.24.1
H Out-of-bounds Write	<3.2.7-150600.3.24.1
M Integer Overflow or Wraparound	<3.2.7-150600.3.24.1
H Out-of-bounds Write	<3.2.7-150600.3.24.1
H Not Failing Securely ('Failing Open')	<3.2.7-150600.3.24.1
M Improper Certificate Validation	<3.2.7-150600.3.24.1
H Allocation of Resources Without Limits or Throttling	<3.2.7-150600.3.24.1
H Algorithmic Complexity	<3.2.7-150600.3.24.1
H Link Following	<3.2.7-150600.3.24.1
M Incorrect Type Conversion or Cast	<3.2.7-150600.3.24.1
H Incorrect Authorization	<3.2.7-150600.3.24.1
H Directory Traversal	<3.2.7-150600.3.24.1
H Link Following	<3.2.7-150600.3.24.1
M Link Following	<3.2.7-150600.3.24.1
M Incorrect Calculation of Buffer Size	<3.2.7-150600.3.24.1
M Improper Validation of Specified Quantity in Input	<3.2.7-150600.3.24.1
H Link Following	<3.2.7-150600.3.24.1
M Link Following	<3.2.7-150600.3.24.1
M Link Following	<3.2.7-150600.3.24.1
M Authentication Bypass	<3.2.7-150600.3.24.1
H Link Following	<3.2.7-150600.3.24.1
H OS Command Injection	<3.2.7-150600.3.24.1
H Link Following	<3.2.7-150600.3.24.1
M Incorrect Authorization	<3.2.7-150600.3.24.1
M Improper Validation of Array Index	<3.2.7-150600.3.24.1
H Link Following	<3.2.7-150600.3.24.1
M Reliance on Untrusted Inputs in a Security Decision	<3.2.7-150600.3.24.1
M CRLF Injection	<3.2.7-150600.3.24.1
H Link Following	<3.2.7-150600.3.24.1
M Off-by-one Error	<3.2.7-150600.3.21.1
H Out-of-bounds Read	<3.2.7-150600.3.21.1
M Use of Uninitialized Resource	<3.2.7-150600.3.21.1
M Directory Traversal	<3.2.7-150600.3.21.1
H Directory Traversal	<3.2.7-150600.3.21.1
M Authentication Bypass	<3.2.7-150600.3.21.1
M Detection of Error Condition Without Action	<3.2.7-150600.3.21.1
H Improper Handling of Length Parameter Inconsistency	<3.2.7-150600.3.21.1
H Time-of-check Time-of-use (TOCTOU)	<3.2.7-150600.3.21.1
M Out-of-bounds Read	<3.2.7-150600.3.21.1
M CVE-2025-10158	<3.2.7-150600.3.21.1
M Race Condition	<3.2.7-150600.3.21.1
M Link Following	<3.2.7-150600.3.21.1
C Out-of-bounds Write	<3.2.7-150600.3.21.1
M Directory Traversal	<3.2.7-150600.3.8.1
H Directory Traversal	<3.2.7-150600.3.8.1
M Detection of Error Condition Without Action	<3.2.7-150600.3.8.1
M Race Condition	<3.2.7-150600.3.8.1
M Use of Uninitialized Resource	<3.2.7-150600.3.8.1
C Out-of-bounds Write	<3.2.7-150600.3.8.1

Vulnerability

Vulnerable Version

Use of Uninitialized Resource

<3.2.7-150600.3.24.1