AlmaLinux 10 : opentelemetry-collector (ALSA-2026:34357)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:34357 advisory. github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154...

RockyLinux 10 : opentelemetry-collector (RLSA-2026:34357)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:34357 advisory. github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154...

MiracleLinux 9 : opentelemetry-collector-0.144.0-2.el9_8 (AXSA:2026-1213:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1213:03 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go:...

sosreport Exposure of Sensitive Information vulnerability

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

RockyLinux 9 : opentelemetry-collector (RLSA-2026:34359)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:34359 advisory. github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154...

MAL-2026-6749 Malicious code in ipa-user-collector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5719ec23d0195e518782dbc26a8a05b54fd827d1ec18d41619d163f7175eaa28 The package ships an empty runtime module src/ipausercollector/init.py contains only version but overrides setup.py cmdclass for install, develop, an...

RHSA-2026:34359 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:34357 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 10 : opentelemetry-collector (RHSA-2026:34357)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:34357 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

ALSA-2026:34359 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154 github.com/prometheus/prometheus: Prometheus: Information...

MAL-2026-6701 Malicious code in ripshakti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7ce8c4b0c7a25d70f9043d4208694cdef5ad174aa493ee9e9097ea6693a668 The package's preinstall lifecycle hook scripts.preinstall = "node index.js" auto-executes index.js on npm install. The script queries the AWS instan...

Malicious code in @uisp/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e841054b9f1d1625077178da23e8096c345ff196851058742d4903747d1461ea Package published to the public npm registry under the @uisp scope at version 99.0.1 — the canonical dependency-confusion shape organization-matching...

Malicious code in anthropic-internal-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3bb04aee6f5f1d8768b7fd2173cd7c0cac18b5d83d6a83cf2be96a7512d8f7 Package name impersonates the Anthropic namespace and ships a preinstall hook scripts.preinstall = 'node index.js' that executes on every npm install...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-securityinsights, crossplane-provider-azure-servicebus, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-authorization, crossplane-provider-azure-servicelinker, traefik-fips, crossplane-provider-azure-purview,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cloudbeat, mattermost-fips, telegraf, kine, knative-eventing-fips, tekton-pipelines-fips, vault, minio, gitea, trivy, cloud-provider-aws, aactl, k9s-fips, chisel, commercial-expanso-edge, docker-machine-driver-harvester, osv-scanner, chisel-fips, harbor-fips,...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: telegraf, goreleaser, nuclei, cert-manager, external-secrets-operator, crossplane-provider-azure-storage, gobuster, nfpm, crossplane-provider-azure-sql, grafana, splunk-otel-collector, crossplane-provider-azure-managedidentity, crossplane-provider-family-azure,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: chisel, flux, kots, external-secrets-operator, trivy-operator, mods, docker-machine-driver-harvester, flux-notification-controller, gh, containerd, k9s, steampipe, act, ko, kubescape, minio, gomplate, zot, terraform-provider-tls, istio, ksops, age, k8sgpt, step, nfpm...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: chisel, flux, kots, kubernetes, external-secrets-operator, trivy-operator, external-dns, gitea, helm, containerd, k9s, mattermost, falco-no-driver, spire-server, kubernetes-dashboard, flux-image-automation-controller, kubescape, minio, zot, cilium, istio, cilium-cli,...