CLEANSTART-2026-BK17545 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

🗓️ 07 Apr 2026 00:38:33Reported by GoogleType

osv🔗 osv.dev👁 14 Views

Malicious malformed token causes memory exhaustion during parsing in the Prometheus mysqld exporter.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002.	2 May 202507:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Protocol Buffers protobuf-go	26 Feb 202518:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	4 Dec 202410:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities which can affect IBM Storage Scale cloudkit and CES S3 are now addressed. (CVE-2025-22868, CVE-2025-22869)	9 May 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to loss of confidentiality (CVE-2025-68121)	31 Mar 202615:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for October 2025 - Multiple CVEs addressed	3 Dec 202506:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilies in Go affect IBM Robotic Process Automation for Cloud Pak.	2 Dec 202415:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Protocol Buffers protobuf-go denial of service vulnerability [ CVE-2024-24786]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	10 Mar 202612:40	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BK17545.json
osv	www.osv.dev/vulnerability/CVE-2024-24786
osv	www.osv.dev/vulnerability/CVE-2025-22868
osv	www.osv.dev/vulnerability/CVE-2025-61732
osv	www.osv.dev/vulnerability/CVE-2025-68121
osv	www.osv.dev/vulnerability/CVE-2026-26958
osv	www.osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv
osv	www.osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-24786
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-22868

18 Sep 2026 12:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.01262

Malicious input Memory exhaustion Parsing vulnerability Prometheus mysqld exporter