Known vulnerabilities in osbuild-composer-core

Vendor: OpenAnolis
Software: osbuild-composer-core
Software CPE: cpe:2.3:o:openanolis:osbuild-composer-core:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting osbuild-composer-core osbuild-composer-core is affected by 23 known vulnerabilities: 1 high, 22 medium Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140600 - Improper input validation
CVE-2026-32281		 CWE-20 Medium
No
No
 165.1-4 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 34 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 165.1-4 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 65 more
#VU124115 - Improper Authorization
CVE-2026-27137		 CWE-285 Medium
No
No
 149-5 19.03.2026 SB2026031903
SB2026031905
SB2026032422
and 9 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 149-5 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 130 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 149-4 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 142 more
#VU124033 - Improper input validation
CVE-2025-61728		 CWE-20 Medium
No
No
 149-4 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 45 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 149-4 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 112 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 149-4 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 149-3 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 132.2-2.0.1 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 118.2-1.0.1, 132.2-1.0.1 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105450 - Resource exhaustion
CVE-2025-27144		 CWE-400 Medium
No
No
 132.2-3.0.1 07.03.2025 SB2025030735
SB2025030736
SB2025030737
and 80 more
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355		 CWE-457 Medium
No
No
 132.2-1.0.1 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 132.2-1.0.1 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 101-2.0.1, 118-2.0.1 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU89084 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-2307		 CWE-362 Medium
No
No
 101-2 01.05.2024 SB2024050110
SB2024050116
SB2024061160
and 2 more
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394		 CWE-401 Medium
No
No
 132.2-1.0.1 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717		 CWE-770 Medium
Available
No
 76-2.0.1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 76-2.0.1 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 101-2.0.1, 118-2.0.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more


Showing elements 1 - 20 out of 23