CLEANSTART-2026-YG84759 Security fixes in prometheus-mysqld-exporter 0.18.0-r1

Package prometheus-mysqld-exporter version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-26958...

CLEANSTART-2026-OD25752 Security fixes in prometheus-redis-exporter 1.86.0-r0

Package prometheus-redis-exporter version 1.86.0-r0 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-NK58525 Security fixes in druid-exporter-fips 0.10-r3

Package druid-exporter-fips version 0.10-r3 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-MR71979 Security fixes in prometheus-redis-exporter-fips 1.79.0-r3

Package prometheus-redis-exporter-fips version 1.79.0-r3 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-YB06143 Security fixes in access-log-exporter 0.1.15-r0

Package access-log-exporter version 0.1.15-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-HY96164 Security fixes in kubernetes-event-exporter-fips 1.7-r0

Package kubernetes-event-exporter-fips version 1.7-r0 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...

CLEANSTART-2026-YT08737 Security fixes in nginx-prometheus-exporter 1.5.1-r2

Package nginx-prometheus-exporter version 1.5.1-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-TI67448 Security fixes in nginx-prometheus-exporter-fips 1.5.1-r1

Package nginx-prometheus-exporter-fips version 1.5.1-r1 fixes 30 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-FG88760 Security fixes in prometheus-mysqld-exporter 0.15.0-r3

Package prometheus-mysqld-exporter version 0.15.0-r3 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39833, CVE-2026-39821, CVE-2026-42506...

CLEANSTART-2026-JC40207 Security fixes in prometheus-elasticsearch-exporter-fips 1.10.0-r0

Package prometheus-elasticsearch-exporter-fips version 1.10.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-CK92485 Security fixes in prometheus-mysqld-exporter 0.19.0-r2

Package prometheus-mysqld-exporter version 0.19.0-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-FH31157 Security fixes in prometheus-nats-exporter 0.15.0-r0

Package prometheus-nats-exporter version 0.15.0-r0 fixes 1 vulnerabilities: ghsa-fhg8-qxh5-7q3w...

CLEANSTART-2026-RX97622 Security fixes in dcgm-exporter 4.5.1-r0

Package dcgm-exporter version 4.5.1-r0 fixes 7 vulnerabilities: CVE-2026-27139, CVE-2025-61732, CVE-2025-68121, CVE-2026-27142, CVE-2026-25679...

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2: Use proper obs time form...

SUSE-SU-2026:3416-1 Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: - Release 1.4.2: Use proper obs time...

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: cert-manager, spire-server, minio, prometheus, zitadel, flux, elastic-agent-fips, cilium, commercial-grafana, terraform, telegraf, kine, kots, kyverno, zot, helm, backup-restore-operator, prometheus-mongodb-exporter, loki, reports-server, k3s, aactl, snyk-cli, nerdct...

CVE-2026-47483

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

EUVD-2026-49884

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...