CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: karpenter-fips, kubernetes-dashboard-auth-fips, minify, nsc-fips, grype-fips, kubevirt-cdi-apiserver-fips, grafana-mimir, teleport-operator-fips, crossplane-provider-aws-osis, request-1279, aws-network-policy-agent-fips, pvc-autoresizer-fips, consul, longhorn-engine,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, grafana-mimir, doppler-kubernetes-operator, crossplane-provider-aws-osis, longhorn-engine, drone-fips, rancher-support-bundle-kit, crossplane-provider-aws-rolesanywhere, src-fingerprint-fips, clickhouse-operator,...

Azure Linux 3.0 Security Update: prometheus-process-exporter (CVE-2022-46146)

The version of prometheus-process-exporter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-46146 advisory. - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: karpenter-fips, git-lfs, blob-csi-fips, lvm-driver, nvidia-nsight-compute-13.1, openbao-k8s-fips, custom-pod-autoscaler-operator, kubeflow-katib, newrelic-nri-statsd, apm-server-fips, terraform-provider-tls-fips, nvidia-nsight-compute-12.9, knative-eventing-fips,...

CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2

CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2. A patched version of the package is available...

AZL-58413 CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

CVE-2022-46146 affecting package prometheus-process-exporter for versions less than 0.8.2-1

CVE-2022-46146 affecting package prometheus-process-exporter for versions less than 0.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.8.2-1

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19. A patched version of the package is available...

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.7.10-18

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.7.10-18. A patched version of the package is available...

AZL-41992 CVE-2022-46146 affecting package prometheus-process-exporter for versions less than 0.8.2-1

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix...

AZL-33637 CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.7.10-18

clientgolang is the instrumentation library for Go applications in Prometheus, and the promhttp package in clientgolang provides tooling around HTTP servers and clients. In clientgolang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and...

AZL-35122 CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.8.2-1

clientgolang is the instrumentation library for Go applications in Prometheus, and the promhttp package in clientgolang provides tooling around HTTP servers and clients. In clientgolang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and...

AZL-33638 CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...

AZL-35123 CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...