206 matches found
CLEANSTART-2026-OA61681 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the alertmanager package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-DN43014 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection
Security vulnerability affects the alertmanager package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection...
CLEANSTART-2026-PX77651 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the prometheus-alertmanager package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates
A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...
grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates
A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...
grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates
A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...
CLEANSTART-2026-GW32041 Security fixes in prometheus-alertmanager 0.34.0-r1
Package prometheus-alertmanager version 0.34.0-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...
BIT-GRAFANA-2026-17033 CVE-2026-17033 CVE Record
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...
SUSE SLES15: golang-github-prometheus-alertmanager / etc (SUSE-SU-2026:3714-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3714-1 advisory. prometheus-postgresexporter: - CVE-2022-21698: Replace github.com/prometheus/clientgolang with version 1.11.1 and prevent validation bypass and...
SUSE CVE-2026-17033
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...
CVE-2026-17033
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...
CVE-2026-17033 CVE-2026-17033 CVE Record
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...
CVE-2026-17033 CVE-2026-17033 CVE Record
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...
EUVD-2026-64887
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...
CVE-2026-17033
Grafana OSS is vulnerable to a stored cross-site scripting (XSS) flaw in how it handles external Alertmanager alerts. An authenticated attacker with Editor access or alert.instances.external:write can submit an alert containing a crafted generatorURL field. Grafana renders this value directly as ...
PT-2026-80879
Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description An authenticated attacker with Editor access or alert.instances.external:write permissions can submit an external Alertmanager alert containing a controlled generatorURL. The software renders...
Grafana OSS: Stored XSS via external Alertmanager generatorURL
An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL . The attacker is authorized to create the alert, but not to execute script in another user’s Grafana session. Grafana renders...
The vulnerability of the Alertmanager Templates Test Endpoint component of the Grafana monitoring and observation platform allows a perpetrator to trigger a service failure.
The vulnerability of the Alertmanager Templates Test Endpoint component of the Grafana monitoring and logging platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
GO-2023-2020 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager, promxy...
GO-2024-2883 vulnerabilities
Vulnerabilities for packages: cortex-fips, rekor, grafana-mimir, fulcio, cortex, timestamp-authority-fips, prometheus-alertmanager, prometheus-alertmanager-fips, argo-cd, fulcio-fips, timestamp-authority, rekor-fips...