CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, tkn-fips, apache-exporter, kubo, clickhouse-backup-fips, podinfo-fips, karpenter-fips, minio, eks-distro, sftpgo-plugin-pubsub, azurefile-csi-fips,...

CVE-2026-39826 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, tkn-fips, apache-exporter, kubo, clickhouse-backup-fips, podinfo-fips, karpenter-fips, minio, eks-distro, sftpgo-plugin-pubsub, azurefile-csi-fips,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: tflintenv-fips, cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, cluster-proportional-autoscaler-fips, kubedock-fips, clickhouse-operator-fips, tkn-fips, apache-exporter, minify, kubo, clickhouse-backup-fips,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: tflintenv-fips, cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, cluster-proportional-autoscaler-fips, kubedock-fips, clickhouse-operator-fips, tkn-fips, apache-exporter, minify, kubo, clickhouse-backup-fips,...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: tflintenv-fips, cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, cluster-proportional-autoscaler-fips, kubedock-fips, clickhouse-operator-fips, tkn-fips, apache-exporter, minify, kubo, clickhouse-backup-fips,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: tflintenv-fips, cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, cluster-proportional-autoscaler-fips, kubedock-fips, clickhouse-operator-fips, tkn-fips, apache-exporter, minify, kubo, clickhouse-backup-fips,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: tflintenv-fips, cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, cluster-proportional-autoscaler-fips, kubedock-fips, clickhouse-operator-fips, tkn-fips, apache-exporter, minify, kubo, clickhouse-backup-fips,...

GHSA-5M4P-2GJX-P2G8 vulnerabilities

Vulnerabilities for packages: tflintenv-fips, cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, cluster-proportional-autoscaler-fips, kubedock-fips, clickhouse-operator-fips, tkn-fips, apache-exporter, minify, kubo, clickhouse-backup-fips,...

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, cluster-proportional-autoscaler-fips, kubedock-fips, clickhouse-operator-fips, tkn-fips, apache-exporter, minify, kubo, clickhouse-backup-fips, esbuild-fips,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, crossplane-provider-aws-kinesis-fips, livekit-cli, prometheus-pgbouncer-exporter-fips, cluster-proportional-autoscaler-fips, kubedock-fips, clickhouse-operator-fips, tkn-fips, apache-exporter, minify, kubo, clickhouse-backup-fips, esbuild-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: vault-env, victoriametrics-operator, cluster-proportional-autoscaler-fips, rancher-support-bundle-kit, karpenter-fips, kubectx, flux-notification-controller, sftpgo-plugin-pubsub, sftpgo-plugin-kms, prometheus-operator-fips, aws-nuke-fips, fulcio-fips,...

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

...

Prometheus Azure AD remote write OAuth client secret exposed via config API

...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: tempo, aws-otel-collector, telegraf, metrics-server, mc, opentelemetry-collector-contrib, opentelemetry-operator, fluent-bit-plugin-loki, keda, certificate-transparency, istio, datadog-agent, opentelemetry-collector, karma, k8sgpt, mcp-grafana, minio-operator,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy-fips, agentbeat, cloudzero-agent-fips, mc-fips, beats, cloud-sql-proxy, trillian-fips, mcp-grafana-fips, nrdot-collector-k8s-fips, opentelemetry-operator, mc, tempo-fips, tempo, prometheus, google-cloud-otel-ops-collector, prometheus-pushgateway-fips,...

SUSE CVE-2026-42151

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the clientsecret field in the Azure AD remote write OAuth configuration storage/remote/azuread was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving...

SUSE CVE-2026-42154

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...

PT-2026-38079

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...

PT-2026-38078

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client secret field in the Azure AD remote write OAuth configuration storage/remote/azuread was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving...

Linux Distros Unpatched Vulnerability : CVE-2026-42154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not...