golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media (moderate)

golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:12058-1 Rating: moderate Cross-References: CVE-2026-2303 CVSS scores: CVE-2026-2303 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves o...

CLEANSTART-2026-RH44885 Alertmanager handles alerts sent by client applications such as the Prometheus server

Security vulnerability affects the grafana package. Alertmanager handles alerts sent by client applications such as the Prometheus server...

openSUSE 16 Security Update : golang-github-prometheus-alertmanager (openSUSE-SU-2026:22027-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22027-1 advisory. Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net ...

Security update for golang-github-prometheus-alertmanager (important)

openSUSE security update: security update for golang-github-prometheus-alertmanager ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22027-1 Rating: important References: bsc1266615 bsc1269834 Cross-References: CVE-2026-2303 CVE-2026-39821 CVSS score...

OPENSUSE-SU-2026:22027-1 Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.57.0 bsc1266615 - Update to version 0.33.1 jscPED-16708:...

OPENSUSE-SU-2026:12058-1 golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.34.1-2.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-OA61681 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the alertmanager package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-KU80332 Previously, a channel registered in the mux's chanList is not usable until it is established

Security vulnerability affects the alertmanager package. Previously, a channel registered in the mux's chanList is not usable until it is established...

CLEANSTART-2026-DN43014 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Security vulnerability affects the alertmanager package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection...

CLEANSTART-2025-UV88153 Alertmanager handles alerts sent by client applications such as the Prometheus server

Security vulnerability affects the alertmanager package. Alertmanager handles alerts sent by client applications such as the Prometheus server...

CLEANSTART-2026-PX77651 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the prometheus-alertmanager package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates

A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...

grafana: Grafana: Cross-Site Scripting (XSS) via unsanitized Alertmanager generatorURL

A flaw was found in Grafana. An authenticated attacker with Editor access or alert.instances.external:write permissions can submit an external Alertmanager alert containing a controlled generatorURL. Grafana improperly renders this URL without proper sanitization, allowing for a bypass of the cli...

grafana: Grafana: Cross-Site Scripting (XSS) via unsanitized Alertmanager generatorURL

A flaw was found in Grafana. An authenticated attacker with Editor access or alert.instances.external:write permissions can submit an external Alertmanager alert containing a controlled generatorURL. Grafana improperly renders this URL without proper sanitization, allowing for a bypass of the cli...

grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates

A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...

grafana: Grafana: Denial of Service via uncontrolled memory usage in alertmanager templates

A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...

grafana: Grafana: Cross-Site Scripting (XSS) via unsanitized Alertmanager generatorURL

A flaw was found in Grafana. An authenticated attacker with Editor access or alert.instances.external:write permissions can submit an external Alertmanager alert containing a controlled generatorURL. Grafana improperly renders this URL without proper sanitization, allowing for a bypass of the cli...

CLEANSTART-2026-GW32041 Security fixes in prometheus-alertmanager 0.34.0-r1

Package prometheus-alertmanager version 0.34.0-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

BIT-GRAFANA-2026-17033 CVE-2026-17033 CVE Record

An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...

SUSE SLES15: golang-github-prometheus-alertmanager / etc (SUSE-SU-2026:3714-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3714-1 advisory. prometheus-postgresexporter: - CVE-2022-21698: Replace github.com/prometheus/clientgolang with version 1.11.1 and prevent validation bypass and...