golang-github-prometheus-prometheus-3.11.2-1.1 on GA media (moderate)

golang-github-prometheus-prometheus-3.11.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10607-1 Rating: moderate Cross-References: CVE-2026-40179 CVSS scores: CVE-2026-40179 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2026-40179 SUSE : 5.3...

CLEANSTART-2026-PM81907 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the prometheus package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-WA14162 Delete function fails to properly validate offsets when processing malformed JSON input

Multiple security vulnerabilities affect the prometheus package. The Delete function fails to properly validate offsets when processing malformed JSON input. See references for individual vulnerability details...

CLEANSTART-2026-NG28268 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the prometheus package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-JY63371 Delete function fails to properly validate offsets when processing malformed JSON input

Multiple security vulnerabilities affect the prometheus package. The Delete function fails to properly validate offsets when processing malformed JSON input. See references for individual vulnerability details...

CLEANSTART-2026-GG94489 go-retryablehttp prior to 0

Multiple security vulnerabilities affect the prometheus package. go-retryablehttp prior to 0. See references for individual vulnerability details...

SUSE: Security Advisory (SUSE-SU-2026:20574-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:20232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2026:10124-1 golang-github-prometheus-prometheus-3.9.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-3.9.1-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-22870 affecting package prometheus for versions less than 2.45.4-12

CVE-2025-22870 affecting package prometheus for versions less than 2.45.4-12. A patched version of the package is available...

CVE-2024-35255 affecting package prometheus for versions less than 2.45.4-11

CVE-2024-35255 affecting package prometheus for versions less than 2.45.4-11. A patched version of the package is available...

CVE-2024-51744 affecting package prometheus for versions less than 2.37.9-4

CVE-2024-51744 affecting package prometheus for versions less than 2.37.9-4. A patched version of the package is available...

CVE-2025-30204 affecting package prometheus for versions less than 2.37.9-3

CVE-2025-30204 affecting package prometheus for versions less than 2.37.9-3. A patched version of the package is available...

GHSA-3M87-5598-2V4F vulnerabilities

Vulnerabilities for packages: prometheus, grafana, node-problem-detector-fips...

CVE-2025-22868 affecting package prometheus for versions less than 2.45.4-8

CVE-2025-22868 affecting package prometheus for versions less than 2.45.4-8. A patched version of the package is available...

AZL-58472 CVE-2025-22870 affecting package prometheus for versions less than 2.45.4-12

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

CVE-2024-6104 affecting package prometheus for versions less than 2.37.0-14

CVE-2024-6104 affecting package prometheus for versions less than 2.37.0-14. A patched version of the package is available...

AZL-42898 CVE-2024-6104 affecting package prometheus for versions less than 2.45.4-3

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...