Upgrade SLES:15.6 gfs2-kmp-default to version 6.4.0-150600.23.14.2 or higher.

org.webjars.npm:undici vulnerabilities

5.28.4

3 years ago

6 months ago

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:undici package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Insecure Randomness	[0,)
L Improper Authorization	[,5.28.4)
L Improper Access Control	[,5.28.4)
L Permissive Cross-domain Policy with Untrusted Domains	[,5.28.3)
L Information Exposure	[,5.27.0)
H Regular Expression Denial of Service (ReDoS)	[,5.20.0)
M CRLF Injection	[,5.20.0)
M CRLF Injection	[,5.10.0)
M Server-side Request Forgery (SSRF)	[,5.10.0)
L Information Exposure	[,5.10.0)
M CRLF Injection	[,5.10.0)
M Improper Certificate Validation	[4.8.2,5.5.1)

1 - 13 of 13 Results