GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, kube-rbac-proxy-fips, kube-logging-operator, ip-masq-agent, flux-helm-controller, prometheus-statsd-exporter-fips, dynamic-localpv-provisioner, k3d, policy-controller-fips, prometheus-statsd-exporter, skaffold, configmap-reload-fips,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, direnv, delve, src-fingerprint, grpcurl, grafana-operator, nri-haproxy, wireguard-go, fq, cni-plugins, controller-gen, flannel-cni-plugin, golangci-lint, caddy, kyverno-policy-reporter-kyverno-plugin, bazelisk, nri-mongodb, kustomize,...

AZL-35593 CVE-2024-24786 affecting package prometheus for versions less than 2.37.9-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, direnv, delve, src-fingerprint, grpcurl, grafana-operator, nri-haproxy, wireguard-go, fq, cni-plugins, controller-gen, flannel-cni-plugin, golangci-lint, caddy, kyverno-policy-reporter-kyverno-plugin, bazelisk, nri-mongodb, kustomize,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, kube-rbac-proxy-fips, kube-logging-operator, ip-masq-agent, flux-helm-controller, prometheus-statsd-exporter-fips, dynamic-localpv-provisioner, k3d, policy-controller-fips, prometheus-statsd-exporter, skaffold, configmap-reload-fips,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, nri-kafka, k8ssandra-operator, kuberay-operator, nri-rabbitmq, gke-gcloud-auth-plugin, temporal-ui-server, kube-rbac-proxy-fips, lazygit, gobuster, go-licenses, helm-push, kube-logging-operator, dagger, thanos, prometheus-pushgateway,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, nri-kafka, k8ssandra-operator, kuberay-operator, nri-rabbitmq, gke-gcloud-auth-plugin, temporal-ui-server, kube-rbac-proxy-fips, lazygit, gobuster, go-licenses, helm-push, kube-logging-operator, dagger, thanos, prometheus-pushgateway,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, nri-kafka, k8ssandra-operator, kuberay-operator, nri-rabbitmq, gke-gcloud-auth-plugin, temporal-ui-server, kube-rbac-proxy-fips, lazygit, gobuster, go-licenses, helm-push, kube-logging-operator, dagger, thanos, prometheus-pushgateway,...

AZL-35670 CVE-2024-24786 affecting package prometheus for versions less than 2.45.4-6

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35594 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35671 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

openSUSE: Security Advisory for prometheus (SUSE-SU-2023:0465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for SUSE Manager Client Tools (SUSE-SU-2023:3144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Golang Prometheus (SUSE-SU-2023:3888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for SUSE Manager Client Tools (SUSE-SU-2023:3868-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for golang (SUSE-SU-2023:2598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:0512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19. A patched version of the package is available...

SUSE SLES15 / openSUSE 15 Security Update : golang-github-prometheus-alertmanager (SUSE-SU-2024:0512-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0512-1 advisory. golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: -...

SUSE-SU-2024:0512-1 Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: + CVE-2023-40577: Fix stored XSS via the /api/v1/alerts endpoint in the Alertmanager UI...