CVE-2026-77097

Commvault Private Metrics Server is affected by a missing authentication condition that impacts the metrics upload functionality, allowing an unauthenticated network-based attacker to cause a denial of service (high availability impact, low integrity impact). The CNA (Commvault) rates this CVSS 4...

CVE-2026-77098

Commvault Private Metrics Server is affected by an SQL injection vulnerability affecting database operations, rated CVSS 3.1: 9.8 (CRITICAL) and CVSS 4.0: 8.8 (HIGH) . CISA SSVC assesses exploitation as "none," automatable as "yes," and technical impact as "partial." No public exploit details are...

EUVD-2026-72726

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77097: Missing Authentication for Critical Function

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

PT-2026-87047

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098: Improper Neutralization of Special Elements used in an SQL Command

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

PT-2026-87046

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

suricata_exporter v0.6.0

Suricata Prometheus Exporter This is a Prometheus Exporter for Suricata using dump-counters via the unix socket to query metrics. Usage $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -versio...

Important: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-3 This version is a rebuild of 2.19.0 using a newer base image, Go modules and Go compiler, and two bug fixes. See the release notes for more information.

Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

CLEANSTART-2026-WT90810 Security fixes in kube-state-metrics 2.20.0-r1

Package kube-state-metrics version 2.20.0-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g, CVE-2026-41178...

CLEANSTART-2026-SK94653 Security fixes in kube-state-metrics-fips 2.20.0-r1

Package kube-state-metrics-fips version 2.20.0-r1 fixes 9 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-OJ80990 Security fixes in kube-state-metrics-fips 2.20.0-r2

Package kube-state-metrics-fips version 2.20.0-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-PZ86100 Security fixes in metrics-server 0.9.0-r1

Package metrics-server version 0.9.0-r1 fixes 2 vulnerabilities: CVE-2026-73500, ghsa-gcjh-h69q-9w9g...

The vulnerability of the Metrics component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Metrics component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Malicious code in ux-metrics-client-interaction-subscriber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6066e87b7b0822678d3514839bc7eba18d46ff1d034c12ea169f4c3513df132b package.json line 11 declares a dependency whose key equals the package's own name ux-metrics-client-interaction-subscriber and whose value is a bare...

MAL-2026-15545 Malicious code in ux-metrics-client-interaction-subscriber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6066e87b7b0822678d3514839bc7eba18d46ff1d034c12ea169f4c3513df132b package.json line 11 declares a dependency whose key equals the package's own name ux-metrics-client-interaction-subscriber and whose value is a bare...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal-ui-server-fips, falcosidekick-ui-fips, temporal, kube-metrics-adapter-fips, temporal-ui-server, listmonk, falcosidekick-ui, temporal-fips...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal-ui-server-fips, falcosidekick-ui-fips, temporal, kube-metrics-adapter-fips, temporal-ui-server, listmonk, falcosidekick-ui, temporal-fips...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: temporal, temporal-ui-server, kube-metrics-adapter...

CVE-2026-75601

Static Web Server SWS is a production-ready web server suitable for static web files or assets. Through 2.43.0, instances with both basic-auth and metrics features enabled process the /metrics endpoint before the basic-auth check in src/handler.rs, allowing an unauthenticated remote attacker to...