CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: src-fingerprint, aws-flb-firehose, aws-flb-cloudwatch, smokescreen, neuvector-dbgen, aws-flb-kinesis, kpt, php-fpmexporter, terraform-provider-google, newrelic-nri-statsd, gostatsd, go-discover, kube-fluentd-operator, sonobuoy, kubeflow, docker-credential-gcr,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: src-fingerprint, aws-flb-firehose, aws-flb-cloudwatch, smokescreen, neuvector-dbgen, aws-flb-kinesis, kpt, php-fpmexporter, terraform-provider-google, newrelic-nri-statsd, gostatsd, go-discover, kube-fluentd-operator, sonobuoy, kubeflow, docker-credential-gcr,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, aws-flb-kinesis-fips, src-fingerprint, kubeflow-fips, aws-flb-cloudwatch, aws-flb-kinesis, aws-flb-firehose-fips, kpt, smokescreen, wavefront-collector-for-kubernetes, kube-fluentd-operator, terraform-provider-google-fips, kubeflow,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, aws-flb-kinesis-fips, src-fingerprint, kubeflow-fips, aws-flb-cloudwatch, aws-flb-kinesis, aws-flb-firehose-fips, kpt, smokescreen, wavefront-collector-for-kubernetes, kube-fluentd-operator, terraform-provider-google-fips, kubeflow,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: aactl, kratos, spicedb, gke-gcloud-auth-plugin, cloud-provider-vsphere, sqlexporter, grpc-health-probe, falco-no-driver, kor, hcloud, kapp, newrelic-fluent-bit-output, terraform, ctop, rke2-cloud-provider, terraform-provider-tls, steampipe, redka, pluto,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3037 (ALAS-2025-3037)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300059.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3037 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted the preceding description block directly from the tested product...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Co...

EUVD-2024-45843

Malicious code in bioql PyPI...

EUVD-2022-7662

Malicious code in bioql PyPI...

EUVD-2022-4475

Malicious code in bioql PyPI...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: spark, apache-nifi, logstash-input-http, logstash-input-tcp, docker-selenium, wavefront-proxy, akhq, thingsboard, tez, sonarqube, trino, cassandra-reaper, apache-activemq-artemis, wildfly, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, apicurio-registr...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: docker-selenium, apache-nifi, localstack, celeborn, keycloak, sonarqube, akhq, zookeeper-fips, elasticsearch, thingsboard, logstash-input-http, opensearch, wavefront-proxy, spark, cassandra-reaper, seata, zookeeper, management-api-for-apache-cassandra-4.1,...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: docker-selenium, apache-nifi, localstack, celeborn, keycloak, sonarqube, akhq, zookeeper-fips, elasticsearch, thingsboard, logstash-input-http, opensearch, wavefront-proxy, spark, cassandra-reaper, seata, zookeeper, management-api-for-apache-cassandra-4.1,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: postgres-operator-fips, pgpool2exporter-fips, beats, wavefront-collector-for-kubernetes, chart-testing-fips, cloud-provider-azure-fips, contour-fips, kube-fluentd-operator, s5cmd, aws-signer-notation-plugin-fips, dapr, trust-manager-fips, go-md2man, metallb,...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1029)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1029 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags...