avalanche-config-installer (>=0.2.36 <=0.2.43), avalanche-installer (>=0.0.18 <=0.0.32) +38 more potentially affected by unknown CVE via aws-sdk-s3 (>=0.0.26-alpha <=0.9.0)

aws-sdk-s3 CARGO version =0.0.26-alpha, =0.2.36, =0.0.18, =0.0.42, =0.0.5, =0.0.24, =0.0.1, =0.0.0, =0.0.46, =0.1.7, =0.4.0, =0.4.0, =0.1.1, =0.1.0, =0.8.0, =0.8.0, =0.12.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3120 (ALAS-2025-3120)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300062.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3120 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which m...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, aws-flb-kinesis, kpt, go-discover, kube-fluentd-operator, neuvector-dbgen, terraform-provider-google, src-fingerprint, aws-flb-cloudwatch, smokescreen, sonobuoy, php-fpmexporter, newrelic-nri-statsd, hello-world-golang, gostatsd,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, aws-flb-kinesis, kpt, go-discover, kube-fluentd-operator, neuvector-dbgen, terraform-provider-google, src-fingerprint, aws-flb-cloudwatch, smokescreen, sonobuoy, php-fpmexporter, newrelic-nri-statsd, hello-world-golang, gostatsd,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, docker-credential-gcr-fips, sonobuoy-fips, aws-flb-cloudwatch, terraform-provider-google, aws-flb-firehose-fips, aws-flb-kinesis-fips, kube-fluentd-operator, consul-fips, go-discover, gostatsd, neuvector-dbgen-fips, consul,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, docker-credential-gcr-fips, sonobuoy-fips, aws-flb-cloudwatch, terraform-provider-google, aws-flb-firehose-fips, aws-flb-kinesis-fips, kube-fluentd-operator, consul-fips, go-discover, gostatsd, neuvector-dbgen-fips, consul,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, gptscript, mods, splunk-otel-collector, gomplate, tempo, terraform-docs, kserve-rest-proxy, sonobuoy, hubble, grpcurl, terraform-provider-sendgrid, pulumi-language-dotnet, nsc, flannel-cni-plugin, rancher-telemetry, prometheus,...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted the preceding description block directly from the tested product...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3037 (ALAS-2025-3037)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300059.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3037 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Co...

EUVD-2022-7662

Malicious code in bioql PyPI...

EUVD-2022-4475

Malicious code in bioql PyPI...

EUVD-2024-45843

Malicious code in bioql PyPI...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: druid, zipkin, celeborn, flyway, wavefront-proxy, apicurio-registry, cloudwatch-exporter, spark, selenium, thingsboard, apache-activemq-artemis, logstash-input-http, infinispan, wildfly, akhq, apache-pulsar, docker-selenium, keycloak, logstash-input-tcp, trino, solr,...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-4.0, apache-hop-fips, selenium, zipkin, opensearch, kafka, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, prometheus-jmx-exporter, grpc-java-fips, cassandra-fips, celeborn, akhq,...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-4.0, apache-hop-fips, selenium, zipkin, opensearch, kafka, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, prometheus-jmx-exporter, grpc-java-fips, cassandra-fips, celeborn, akhq,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cri-tools, nova-fips, helm-operator, aws-flb-firehose-fips, sqlexporter-fips, step-kms-plugin-fips, containerd, elvish, neuvector-scanner-fips, k9s-fips, node-feature-discovery, rqlite-fips, bom, kubernetes-csi-external-provisioner, etcd, argo-workflows-fips,...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...