Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3191 (ALAS-2026-3191)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3191 advisory. net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, openfga, nri-consul-fips, kafka-proxy-fips, pgtimetable-fips, restic, karma, langfuse, opentelemetry-collector-contrib-fips, helm-fips, dex, kubernetes-csi-driver-nfs, neuvector-dbgen-fips, amazon-ecs-agent-fips, yace,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: openfga, kafka-proxy-fips, restic, karma, opentelemetry-collector-contrib-fips, helm-fips, dex, kubernetes-csi-driver-nfs, amazon-ecs-agent-fips, longhorn-backing-image-manager-fips, secrets-store-csi-driver-provider-azure-fips, steampipe, gomplate-fips,...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3174 (ALAS-2026-3174)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3174 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2026-1442)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1442 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.10.20260216 or dnf update --advisory ALAS2023-2026-1442 --releasever 2023.10.20260216 to update your system. More information ...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, descheduler, kserve-modelmesh-serving, newrelic-infra-operator, gatekeeper, sftpgo-plugin-auth, grafana-rollout-operator, dkron, cosign, maru, openbao-k8s, kube-vip-cloud-provider, litefs, opentofu, pgpool2exporter,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kube-vip-cloud-provider, kubeflow-pipelines, nginx-prometheus-exporter, chart-testing, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, go-jsonnet, go-licenses, rancher-telemetry, yace, xeol, tfse...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, descheduler, kserve-modelmesh-serving, newrelic-infra-operator, gatekeeper, sftpgo-plugin-auth, grafana-rollout-operator, dkron, cosign, maru, openbao-k8s, kube-vip-cloud-provider, litefs, opentofu, pgpool2exporter,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kube-vip-cloud-provider, kubeflow-pipelines, nginx-prometheus-exporter, chart-testing, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, go-jsonnet, go-licenses, rancher-telemetry, yace, xeol, tfse...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, descheduler, kserve-modelmesh-serving, newrelic-infra-operator, gatekeeper, sftpgo-plugin-auth, grafana-rollout-operator, dkron, cosign, maru, openbao-k8s, kube-vip-cloud-provider, litefs, opentofu, pgpool2exporter,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kube-vip-cloud-provider, kubeflow-pipelines, nginx-prometheus-exporter, chart-testing, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, go-jsonnet, go-licenses, rancher-telemetry, yace, xeol, tfse...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, descheduler, kserve-modelmesh-serving, newrelic-infra-operator, gatekeeper, sftpgo-plugin-auth, grafana-rollout-operator, dkron, cosign, maru, openbao-k8s, kube-vip-cloud-provider, litefs, opentofu, pgpool2exporter,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kube-vip-cloud-provider, kubeflow-pipelines, nginx-prometheus-exporter, chart-testing, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, go-jsonnet, go-licenses, rancher-telemetry, yace, xeol, tfse...

CVE-2022-23511

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...

aws-manager (>=0.0.1 <=0.21.2), aws-sdk-manager (>=0.0.0 <=0.0.10) +2 more potentially affected by unknown CVE via aws-sdk-cloudwatchlogs (>=0.10.1 <=0.31.2)

aws-sdk-cloudwatchlogs CARGO version =0.10.1, =0.0.1, =0.0.0, =1.0.0, =1.0.4 - tracing-cloudwatch =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

aws-manager (>=0.0.1 <=0.21.2), aws-sdk-manager (>=0.0.0 <=0.0.10) +2 more potentially affected by unknown CVE via aws-sdk-cloudwatch (>=0.11.0 <=0.6.0)

aws-sdk-cloudwatch CARGO version =0.11.0, =0.0.1, =0.0.0, =0.1.3, =1.0.0, =2.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

avalanche-config-installer (>=0.2.36 <=0.2.43), avalanche-installer (>=0.0.18 <=0.0.32) +38 more potentially affected by unknown CVE via aws-sdk-s3 (>=0.0.26-alpha <=0.9.0)

aws-sdk-s3 CARGO version =0.0.26-alpha, =0.2.36, =0.0.18, =0.0.42, =0.0.5, =0.0.24, =0.0.1, =0.0.0, =0.0.46, =0.1.7, =0.4.0, =0.4.0, =0.1.1, =0.1.0, =0.8.0, =0.8.0, =0.12.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...