apicurio-registry

Direct Vulnerabilities

Known vulnerabilities in the apicurio-registry package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Improper Authentication	<3.3.1-r0
L GHSA-qcxp-gm7m-4j5v	<3.3.1-r0
L CVE-2026-59949	<3.3.0-r13
L GHSA-xx22-p4ch-683r	<3.3.0-r13
L GHSA-mfg7-5gfp-c4w3	<3.3.0-r12
L Improper Access Control	<3.3.0-r11
L Resource Exhaustion	<3.3.0-r11
L Resource Exhaustion	<3.3.0-r11
L GHSA-jppx-w49h-x2qq	<3.3.0-r11
L GHSA-j92g-9f8w-j867	<3.3.0-r11
L GHSA-mvh2-crg5-v77c	<3.3.0-r11
L GHSA-q6cq-mhr2-jmr5	<3.3.0-r11
H Resource Exhaustion	<3.3.0-r11
L GHSA-4mp9-239f-g9hg	<3.3.0-r11
L CRLF Injection	<3.3.0-r11
L GHSA-r7wm-3cxj-wff9	<3.3.0-r11
L HTTP Request Smuggling	<3.3.0-r11
L CRLF Injection	<3.3.0-r11
L GHSA-6jqx-86gh-f27w	<3.3.0-r11
L GHSA-gcjf-9mgh-3p7g	<3.3.0-r11
L GHSA-6cqp-g7gg-8hr5	<3.3.0-r11
L Incorrect Authorization	<3.3.0-r11
L Allocation of Resources Without Limits or Throttling	<3.3.0-r11
H Resource Exhaustion	<3.3.0-r11
L GHSA-5gvw-p9qm-jgwh	<3.3.0-r11
L GHSA-q4f6-jm68-57ww	<3.3.0-r11
L GHSA-c69g-56f8-xwqj	<3.3.0-r11
L Not Failing Securely ('Failing Open')	<3.3.0-r11
L GHSA-wh89-7897-x99h	<3.3.0-r11
L HTTP Request Smuggling	<3.3.0-r11
L Loop with Unreachable Exit Condition ('Infinite Loop')	<3.3.0-r10
L GHSA-558v-64gr-wgg4	<3.3.0-r10
L GHSA-5jmj-h7xm-6q6v	<3.3.0-r9
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<3.3.0-r9
L Server-Side Request Forgery (SSRF)	<3.3.0-r6
L GHSA-rcqc-6cw3-h962	<3.3.0-r6
L GHSA-hgj6-7826-r7m5	<3.3.0-r6
L GHSA-9fxm-vc8v-hj55	<3.3.0-r6
L Incorrect Authorization	<3.3.0-r6
L GHSA-j3rv-43j4-c7qm	<3.3.0-r6
L GHSA-5hh8-q8hv-fr38	<3.3.0-r6
L Incomplete Blacklist	<3.3.0-r6
L Incorrect Authorization	<3.3.0-r6
L GHSA-rmj7-2vxq-3g9f	<3.3.0-r6
L Incomplete Blacklist	<3.3.0-r6
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<3.3.0-r6
L Resource Exhaustion	<3.3.0-r5
L GHSA-5x3r-wrvg-rp6q	<3.3.0-r5
H Resource Exhaustion	<3.3.0-r5
L GHSA-c2gf-v879-257j	<3.3.0-r5
L Improper Check or Handling of Exceptional Conditions	<3.3.0-r4
L GHSA-cc37-9q2j-3hfv	<3.3.0-r4
L GHSA-h2qv-fj59-j46j	<3.3.0-r4
H Memory Leak	<3.3.0-r4
L GHSA-x4gw-5cx5-pgmh	<3.3.0-r2
L Allocation of Resources Without Limits or Throttling	<3.3.0-r2
C Insufficient Verification of Data Authenticity	<3.3.0-r3
L Use of Insufficiently Random Values	<3.3.0-r3
L GHSA-676x-f7gg-47vc	<3.3.0-r3
L GHSA-xmv7-r254-6q78	<3.3.0-r3
L GHSA-3qp7-7mw8-wx86	<3.3.0-r2
L Improper Access Control	<3.3.0-r2
L GHSA-5pvg-856g-cp85	<3.3.0-r3
C Insufficient Verification of Data Authenticity	<3.3.0-r3
L GHSA-2m67-wjpj-xhg9	<3.3.0-r1
H Allocation of Resources Without Limits or Throttling	<3.3.0-r1
L GHSA-6v53-7c9g-w56r	<3.3.0-r1
L Uncontrolled Recursion	<3.2.4-r3
L GHSA-337m-mw94-2v6g	<3.2.4-r3
L GHSA-rc95-pcm8-65v9	<3.2.4-r1
L GHSA-3g76-f9xq-8vp6	<3.2.4-r1
H Incorrect Authorization	<3.2.4-r1
M Allocation of Resources Without Limits or Throttling	<3.2.4-r1
L Resource Exhaustion	<3.2.1-r6
L GHSA-xxqh-mfjm-7mv9	<3.2.1-r3
L GHSA-57rv-r2g8-2cj3	<3.2.1-r3
H HTTP Request Smuggling	<3.2.1-r3
L GHSA-38f8-5428-x5cv	<3.2.1-r3
L Allocation of Resources Without Limits or Throttling	<3.2.1-r4
H HTTP Response Splitting	<3.2.4-r2
L GHSA-m4cv-j2px-7723	<3.2.1-r3
L CRLF Injection	<3.2.1-r3
C HTTP Request Smuggling	<3.2.1-r3
L GHSA-v8h7-rr48-vmmv	<3.2.1-r3
L GHSA-98qh-xjc8-98pq	<3.2.1-r4
L GHSA-f6hv-jmp6-3vwv	<3.2.1-r6
C HTTP Request Smuggling	<3.2.1-r3
L Resource Exhaustion	<3.2.1-r7
L Integer Overflow or Wraparound	<3.2.1-r3
L GHSA-45q3-82m4-75jr	<3.2.4-r2
C Improper Input Validation	<3.2.1-r5
L GHSA-mj4r-2hfc-f8p6	<3.2.1-r7
L GHSA-cm33-6792-r9fm	<3.2.1-r5
L GHSA-72hv-8253-57qq	<3.2.1-r2
H Allocation of Resources Without Limits or Throttling	<3.2.0-r3
L GHSA-w9fj-cfpg-grvv	<3.2.0-r3
L HTTP Request Smuggling	<3.2.0-r2
L GHSA-pwqr-wmgm-9rr8	<3.2.0-r2
L GHSA-xwmg-2g98-w7v9	<3.0.9-r6
L GHSA-hq9p-pm7w-8p54	<3.0.9-r2
M Improper Authentication	<3.0.9-r2
L GHSA-cxrx-q234-m22m	<3.0.6-r1
L CVE-2024-57699	<3.1.7-r1
L GHSA-j288-q9x7-2f5v	<3.0.9-r5
L GHSA-xq3w-v528-46rv	<3.0.6-r1
L GHSA-fghv-69vj-qj49	<3.0.14-r1
L Uncontrolled Recursion	<3.0.9-r5
M HTTP Request Smuggling	<3.1.6-r1
M XML External Entity (XXE) Injection	<3.0.7-r1
L Uncontrolled Recursion	<3.0.9-r6
L GHSA-wxr5-93ph-8wr9	<3.0.8-r0
L GHSA-pq2g-wx69-c263	<3.1.7-r1
L GHSA-cphf-4846-3xx9	<3.1.6-r1
L GHSA-9342-92gg-6v29	<3.0.11-r1
H Improper Neutralization	<3.0.11-r1
H HTTP Request Smuggling	<3.0.6-r1
L CVE-2025-48734	<3.0.8-r0
H Improper Handling of Highly Compressed Data (Data Amplification)	<3.0.13-r1
L GHSA-4g8c-wm8x-jfhw	<3.0.6-r1
H HTTP Request Smuggling	<3.0.14-r1
M Improper Certificate Validation	<3.0.6-r2
H Improperly Controlled Sequential Memory Allocation	<3.0.6-r2
L GHSA-3p8m-j85q-pgmj	<3.0.13-r1
L GHSA-vrpq-qp53-qv56	<3.0.7-r1
L GHSA-3832-9276-x7gf	<3.0.6-r2
L CVE-2025-24970	<3.0.6-r1
L GHSA-gfh6-3pqw-x2j4	<3.0.6-r2
H Allocation of Resources Without Limits or Throttling	<3.0.12-r1
L Resource Exhaustion	<3.0.6-r1
L GHSA-vgq5-3255-v292	<3.0.9-r1
L GHSA-prj3-ccx8-p6x4	<3.0.12-r1
H Improper Input Validation	<3.1.4-r2
H Memory Leak	<3.0.6-r2
L GHSA-4fwr-mh5q-hchh	<3.0.6-r2
L CRLF Injection	<3.1.4-r3
L GHSA-m494-w24q-6f7w	<3.1.4-r2
L GHSA-84h7-rjj3-6jx4	<3.1.4-r3
L CVE-2025-27817	<3.0.9-r1

Vulnerability

Vulnerable Version

Improper Authentication

<3.3.1-r0