GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, prometheus-elasticsearch-exporter, capslock, kpt, node-problem-detector, hugo-extended, configmap-reload, kubernetes, bank-vaults, protoc-gen-go-grpc, gomplate, helm-operator-fips, supercronic, cloud-sql-proxy-fips, kubescape,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, atlantis, cfssl, buf, crossplane-provider-aws-route53, kube-bench, kubeflow-katib, runc, ollama, gcsfuse, ctop, kaniko, cilium-cli, melange, gomplate, vertical-pod-autoscaler, flux, volume-modifier-for-k8s, terragrunt, temporal-serve...

AZL-35593 CVE-2024-24786 affecting package prometheus for versions less than 2.37.9-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: hey, controller-gen, kyverno-policy-reporter, regclient, dex, prometheus-elasticsearch-exporter, crossplane-provider-azure, q, k3d, dex-k8s-authenticator, prometheus-postgres-exporter-fips, cass-operator-fips, kustomize, cue-fips, newrelic-prometheus-configurator,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: hey, controller-gen, kyverno-policy-reporter, regclient, dex, prometheus-elasticsearch-exporter, crossplane-provider-azure, q, k3d, dex-k8s-authenticator, prometheus-postgres-exporter-fips, cass-operator-fips, kustomize, cue-fips, newrelic-prometheus-configurator,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, prometheus-elasticsearch-exporter, capslock, kpt, node-problem-detector, hugo-extended, configmap-reload, kubernetes, bank-vaults, protoc-gen-go-grpc, gomplate, helm-operator-fips, supercronic, cloud-sql-proxy-fips, kubescape,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubeflow-katib, cfssl, runc, kube-bench, nri-mongodb, gcsfuse, ctop, bom, docker-credential-acr-env, gomplate, vertical-pod-autoscaler, flux, tailscale, volume-modifier-for-k8s, kubebuilder, temporal-server, kubernetes-dashboard,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubeflow-katib, cfssl, runc, kube-bench, nri-mongodb, gcsfuse, ctop, bom, docker-credential-acr-env, gomplate, vertical-pod-autoscaler, flux, tailscale, volume-modifier-for-k8s, kubebuilder, temporal-server, kubernetes-dashboard,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: hey, controller-gen, kyverno-policy-reporter, regclient, dex, prometheus-elasticsearch-exporter, crossplane-provider-azure, q, k3d, dex-k8s-authenticator, prometheus-postgres-exporter-fips, cass-operator-fips, kustomize, cue-fips, newrelic-prometheus-configurator,...

AZL-35670 CVE-2024-24786 affecting package prometheus for versions less than 2.45.4-6

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35671 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35594 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

openSUSE: Security Advisory for SUSE Manager Client Tools (SUSE-SU-2023:3144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for SUSE Manager Client Tools (SUSE-SU-2023:3868-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for golang (SUSE-SU-2023:2598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Golang Prometheus (SUSE-SU-2023:3888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for prometheus (SUSE-SU-2023:0465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:0512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19. A patched version of the package is available...

SUSE SLES15 / openSUSE 15 Security Update : golang-github-prometheus-alertmanager (SUSE-SU-2024:0512-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0512-1 advisory. golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: -...