CVE-2026-26069

Scraparr (Prometheus Exporter) prior to 3.0.2 is affected when Readarr integration is enabled and the exporter’s /metrics is exposed to outsiders. The Readarr API key could be exposed as the alias metric label value, under conditions: Readarr scraping enabled, no alias configured, /metrics public...

PT-2026-7910

Name of the Vulnerable Software and Affected Versions Scraparr versions 3.0.0-beta through 3.0.1 Description Scraparr, a Prometheus Exporter for the arr Suite, disclosed Readarr API keys when the Readarr integration was enabled. This occurred because the exporter exposed the configured Readarr AP...

[SECURITY] Fedora 42 Update: rust-monitord-exporter-0.4.1-8.fc42

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: metacontroller, crossplane-provider-sql, cluster-proportional-autoscaler, aws-otel-collector, rke2-cloud-provider-fips, livekit-server, mockery, render-template-fips, fq, gomplate, maru, terraform-provider-pagerduty, harbor-cli, longhorn-manager-fips,...

[SECURITY] Fedora 43 Update: rust-monitord-exporter-0.4.1-8.fc43

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

[SECURITY] Fedora 42 Update: node-exporter-1.10.2-3.fc42

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

[SECURITY] Fedora 43 Update: node-exporter-1.10.2-3.fc43

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

Fedora 43 : node-exporter (2026-9ba46f22d5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9ba46f22d5 advisory. Update to 1.10.2 Update was blocked by a ppc64 issue, but a workaround has been found. Tenable has extracted the preceding description block directly from th...

Fedora: Security Advisory (FEDORA-2026-9ba46f22d5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : node-exporter (2026-126cd91d11)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-126cd91d11 advisory. Update to 1.10.2 Update was blocked by a ppc64 issue, but a workaround has been found. Tenable has extracted the preceding description block directl...

CLEANSTART-2026-NB26505 Security fixes for GHSA-F6X5-JH6R-WRFV, GHSA-J5W8-Q4QC-RX2X applied in versions: 4.5.1-r0

Multiple security vulnerabilities affect the dcgm-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

Fedora 44 : node-exporter (2026-eaa86d8456)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-eaa86d8456 advisory. Automatic update for node-exporter-1.10.2-3.fc44. Changelog Fri Jan 30 2026 Alejandro Sez - 1.10.2-3 - Fix race condition Fri Jan 16 2026 Fedora...

heist-salt (>=1.0.0 <=5.3.1), isalt (>=2019.12.0 <=2021.2.2) +9 more potentially affected by CVE-2025-62348 via salt (=3007.14.0)

salt PYPI version =3007.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - heist-salt =1.0.0, =2019.12.0, =2019.6.28a3, =2.6.2.dev0, =2020.7.0, =1.1.1, =22.9.8.0rc1, =0.3.2, =0.5.7 - slskit =2022.4.0 Source cves:...

CLEANSTART-2026-TK38210 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the druid-exporter-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-PZ62650 Cancelling a query (e

Multiple security vulnerabilities affect the druid-exporter-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-LZ10721 Within HostnameError

Multiple security vulnerabilities affect the druid-exporter-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-HJ34439 Go before 1

Multiple security vulnerabilities affect the druid-exporter-fips package. Go before 1. See references for individual vulnerability details...

CLEANSTART-2026-KZ30232 Go before 1

Multiple security vulnerabilities affect the druid-exporter-fips package. Go before 1. See references for individual vulnerability details...

CLEANSTART-2026-EK72220 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-CQ38405 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...