52 matches found
OPENSUSE-SU-2025:15178-1 golang-github-prometheus-alertmanager-0.28.1-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-alertmanager-0.28.1-2.1 package on the GA media of openSUSE Tumbleweed...
GHSA-49GW-VXVF-FC2G vulnerabilities
Vulnerabilities for packages: regclient, sops, kubernetes-csi-livenessprobe, q, octo-sts, mods, shfmt, kyverno-policy-reporter-ui, weaviate, slsa-verifier, opa, kubernetes-csi-driver-hostpath, prometheus-alertmanager, grpcurl, wait-for-port, bom, vault-k8s, memcached-exporter, ytt,...
Fedora 41 : golang-github-prometheus-alertmanager (2024-8580c06716)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8580c06716 advisory. Automatic update for golang-github-prometheus-alertmanager-0.27.0-1.fc41. Changelog Thu Apr 18 2024 Mikel Olasagasti Uranga - 0.27.0-1 - Update to 0.27.0 -...
Fedora: Security Advisory (FEDORA-2023-0c6723004f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GO-2023-2020 Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager...
Ubuntu: Security Advisory (USN-6935-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6935-1 prometheus-alertmanager vulnerability
It was discovered that prometheus-alertmanager didn't properly sanitize input it received through an API endpoint. An attacker with permission to send requests to this endpoint could potentially inject arbitrary code. On Ubuntu 20.04 LTS and Ubuntu 22.04 LTS, this vulnerability is only present if...
USN-6935-1: Prometheus Alertmanager vulnerability
It was discovered that prometheus-alertmanager didn't properly sanitize input it received through an API endpoint. An attacker with permission to send requests to this endpoint could potentially inject arbitrary code. On Ubuntu 20.04 LTS and Ubuntu 22.04 LTS, this vulnerability is only present if...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Prometheus Alertmanager vulnerability (USN-6935-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6935-1 advisory. It was discovered that prometheus-alertmanager didn't properly sanitize input it received through an API endpoint. An attacker with...
GHSA-MH55-GQVF-XFWM vulnerabilities
Vulnerabilities for packages: cortex, timestamp-authority, rekor, fulcio, prometheus-alertmanager, grafana-mimir...
openSUSE Security Advisory (SUSE-SU-2024:0512-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 / openSUSE 15 Security Update : golang-github-prometheus-alertmanager (SUSE-SU-2024:0512-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0512-1 advisory. golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: -...
SUSE-SU-2024:0512-1 Security update for golang-github-prometheus-alertmanager
This update for golang-github-prometheus-alertmanager fixes the following issues: golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: + CVE-2023-40577: Fix stored XSS via the /api/v1/alerts endpoint in the Alertmanager UI...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: kubewatch, up, vault-k8s-fips, flux, flux-kustomize-controller, apko, pulumi-language-yaml, prometheus-elasticsearch-exporter, vault-k8s, configmap-reload-fips, kubernetes-dns-node-cache, kubernetes-ingress-defaultbackend, frp, prometheus-adapter-fips, kubevela,...
Debian: Security Advisory (DLA-3609-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3609-1] prometheus-alertmanager security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3609-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucaries October 08, 2023 https://wiki.debian.org/LTS -...
Debian dla-3609 : golang-github-prometheus-alertmanager-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3609 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3609-1 [email protected] https://www.debian.org/lts/security/...
DLA-3609-1 prometheus-alertmanager - security update
Bulletin has no description...
CVE-2023-40577
Prometheus Alertmanager is vulnerable to cross-site scripting due to improper validation of user-supplied input by the /api/v1/alerts endpoint. This issue could allow a remote attacker to inject malicious script into a web page, which would be executed in a victim's web browser within the hosting...