GO-2026-5327 vulnerabilities

Vulnerabilities for packages: cortex, weaviate, juicefs, thanos, bento, cilium, terraform-provider-pagerduty, kubeflow-pipelines, amazon-cloudwatch-agent, grafana-mimir, opentelemetry-collector-contrib, tetragon, tekton-chains, kubescape, slsa-verifier, vcluster, grafana-pyroscope, hubble, promxy...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: aactl, cert-manager-cmctl, kubeflow-katib, kine, helm-operator, bento, k8sgateway, mc, newrelic-fluent-bit-output, steampipe, telegraf, bom, goreleaser, thanos-operator, rancher-helm, spire-server, mattermost, xeol, kubernetes-dashboard-api,...

[SECURITY] Fedora 43 Update: alertmanager-0.33.0-1.fc43

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

[SECURITY] Fedora 44 Update: alertmanager-0.33.0-1.fc44

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: prometheus, nri-prometheus, nova, crossplane-provider-keycloak, local-static-provisioner, harbor, dfc, knative-operator, chisel, flux-source-controller, kubernetes-csi-node-driver-registrar, tetragon, argocd-image-updater, doppler-kubernetes-operator, oauth2-proxy,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus, nri-prometheus, nova, crossplane-provider-keycloak, local-static-provisioner, harbor, dfc, knative-operator, chisel, flux-source-controller, kubernetes-csi-node-driver-registrar, tetragon, argocd-image-updater, doppler-kubernetes-operator, oauth2-proxy,...

[SECURITY] Fedora 43 Update: alertmanager-0.31.1-2.fc43

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

[SECURITY] Fedora 42 Update: alertmanager-0.31.1-2.fc42

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cluster-api, docker-cli-buildx, crossplane-provider-keycloak, flux-source-controller, pulumi-language-java, gitlab-runner, flux-image-automation-controller, crossplane-provider-azure-sql, argocd-image-updater, pulumi-language-dotnet, sops,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: cluster-api, docker-cli-buildx, crossplane-provider-keycloak, flux-source-controller, pulumi-language-java, gitlab-runner, flux-image-automation-controller, crossplane-provider-azure-sql, argocd-image-updater, pulumi-language-dotnet, sops,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, omnictl-multiarch-fips, cert-manager-cmctl-fips, crossplane-provider-aws-elasticache, zot, k9s, argo-workflows-fips, crossplane-provider-aws-route53, snyk-cli, kubescape, crossplane-provider-aws-cloudformation, gitlab-operator-fips, argo-workflows,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kine, git-sync-fips, sftpgo-plugin-pubsub, opentelemetry-collector-contrib-fips, cert-manager-openshift-routes, emqx-exporter, kubernetes-dashboard-api-fips, crossplane-provider-aws-route53, oras-fips, terraform-provider-sendgrid-fips, snyk-cli, task...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kine, git-sync-fips, sftpgo-plugin-pubsub, opentelemetry-collector-contrib-fips, cert-manager-openshift-routes, emqx-exporter, kubernetes-dashboard-api-fips, crossplane-provider-aws-route53, oras-fips, terraform-provider-sendgrid-fips, snyk-cli, task...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kine, git-sync-fips, sftpgo-plugin-pubsub, opentelemetry-collector-contrib-fips, cert-manager-openshift-routes, emqx-exporter, kubernetes-dashboard-api-fips, crossplane-provider-aws-route53, oras-fips, terraform-provider-sendgrid-fips, snyk-cli, task...

CVE-2025-52493

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from...

CVE-2025-52493

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from...

PT-2025-50352

Name of the Vulnerable Software and Affected Versions PagerDuty Runbook versions through 2025-06-12 Description PagerDuty Runbook through 2025-06-12 has an issue where stored secrets are exposed directly in the webpage Document Object Model DOM at the configuration page. While these secrets are...

PagerDuty Runbook 安全漏洞

PagerDuty Runbook is an automation platform from PagerDuty USA. A security vulnerability exists in PagerDuty Runbook version 2025-06-12 and earlier, which stems from a configuration page that directly exposes stored keys, potentially leading to the disclosure of sensitive information...

CVE-2025-52493

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from...

CVE-2025-52493

PagerDuty Runbook (through 2025-06-12) stores secret values in the configuration page DOM. Although fields appear masked, secrets are present in the page source and can be revealed by changing input type from password to text via browser dev tools. Exploitation is described as possible by adminis...