io.github.robothy:local-s3-rest@1.17 vulnerabilities
latest version
1.21
latest non vulnerable version
first published
2 years ago
latest version published
1 months ago
licenses detected
- [1.2,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the io.github.robothy:local-s3-rest package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to XML External Entity (XXE) Injection when parsing DTD files. External entities referenced in a malicious DTD document are resolved and retrieved. This allows attackers to expose information from internal URLs that are not meant to be accessible. How to fix XML External Entity (XXE) Injection? Upgrade | [,1.21) |
Affected versions of this package are vulnerable to XML External Entity (XXE) Injection over the bucket tagging endpoint. External entities referenced in an How to fix XML External Entity (XXE) Injection? Upgrade | [,1.21) |
Affected versions of this package are vulnerable to XML External Entity (XXE) Injection over the bucket tagging endpoint. External entities referenced in a malicious XML document are resolved and retrieved. This allows attackers to expose information from internal URLs that are not meant to be accessible. How to fix XML External Entity (XXE) Injection? Upgrade | [,1.21) |
Affected versions of this package are vulnerable to XML External Entity (XXE) Injection over the bucket creation endpoint. In How to fix XML External Entity (XXE) Injection? Upgrade | [,1.21) |