GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, slsa-verifier, metacontroller, kube-bench, kyverno-policy-reporter, cortex, pulumi, crossplane-provider-aws, crossplane-provider-aws-sqs, weaviate, local-path-provisioner, hugo, influx, buf, crossplane-provider-aws-iam,...

AZL-35594 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: esbuild, kwok, k8ssandra-operator, prometheus-beat-exporter, haproxy-ingress, nri-elasticsearch, prometheus-mongodb-exporter-fips, prometheus-postgres-exporter, kube-oidc-proxy, nri-nginx, configmap-reload-fips, sonobuoy, prometheus-mongodb-exporter, dask-gateway, yq...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: esbuild, kwok, k8ssandra-operator, prometheus-beat-exporter, haproxy-ingress, nri-elasticsearch, prometheus-mongodb-exporter-fips, prometheus-postgres-exporter, kube-oidc-proxy, nri-nginx, configmap-reload-fips, sonobuoy, prometheus-mongodb-exporter, dask-gateway, yq...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: hugo-extended, configmap-reload-fips, envoy-ratelimit, kubernetes-dashboard, helm-push, supercronic, kubernetes-csi-livenessprobe, prometheus-redis-exporter-fips, sigstore-scaffolding, pulumi, tekton-chains, actions-runner-controller, crossplane-provider-aws-eks,...

AZL-35671 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: esbuild, kwok, k8ssandra-operator, prometheus-beat-exporter, haproxy-ingress, nri-elasticsearch, prometheus-mongodb-exporter-fips, prometheus-postgres-exporter, kube-oidc-proxy, nri-nginx, configmap-reload-fips, sonobuoy, prometheus-mongodb-exporter, dask-gateway, yq...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kube-bench, kyverno-policy-reporter, cortex, aws-flb-firehose, pulumi, task, local-path-provisioner, influx, docker-credential-acr-env, volume-modifier-for-k8s, dex, kine, flux, hey, nodetaint, buildkitd, secrets-store-csi-driver-provider-aws,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kube-bench, kyverno-policy-reporter, cortex, aws-flb-firehose, pulumi, task, local-path-provisioner, influx, docker-credential-acr-env, volume-modifier-for-k8s, dex, kine, flux, hey, nodetaint, buildkitd, secrets-store-csi-driver-provider-aws,...

AZL-35593 CVE-2024-24786 affecting package prometheus for versions less than 2.37.9-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35670 CVE-2024-24786 affecting package prometheus for versions less than 2.45.4-6

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

openSUSE: Security Advisory for SUSE Manager Client Tools (SUSE-SU-2023:3144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Golang Prometheus (SUSE-SU-2023:3888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for prometheus (SUSE-SU-2023:0465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for SUSE Manager Client Tools (SUSE-SU-2023:3868-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for golang (SUSE-SU-2023:2598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:0512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19. A patched version of the package is available...

SUSE SLES15 / openSUSE 15 Security Update : golang-github-prometheus-alertmanager (SUSE-SU-2024:0512-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0512-1 advisory. golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: -...

SUSE-SU-2024:0512-1 Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: + CVE-2023-40577: Fix stored XSS via the /api/v1/alerts endpoint in the Alertmanager UI...