CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: cilium, falco-no-driver, omnictl-multiarch-fips, commercial-grafana, zot, kine, commercial-expanso-edge, k3d, elastic-agent-fips, terraform, aactl, kyverno, kots, kaf, zitadel, loki, nerdctl, snyk-cli, omnictl-multiarch, helm, prometheus-operator, cert-manager, minio...

prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media (moderate)

prometheus-haclusterexporter-1.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11340-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.5: prometheus3.5-3.5.5-0.3.hum1 aarch64, x8664 prometheus3.5-3.5.5-0.3.hum1.src src Security Fixes: prometheus3.5: CVE-2026-56852...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: falco-no-driver, external-dns, kueue-fips, ko, grafana-image-renderer, kubernetes-dashboard, apache-beam-java-sdk, flux, apache-beam-python-3.14-sdk, neuvector-fips, bento, spicedb-operator, seaweedfs-fips, crossplane-provider-aws-fis-fips, fortio-fips, metrics-serve...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: falco-no-driver, external-dns, kueue-fips, ko, grafana-image-renderer, kubernetes-dashboard, apache-beam-java-sdk, flux, apache-beam-python-3.14-sdk, neuvector-fips, bento, spicedb-operator, seaweedfs-fips, crossplane-provider-aws-fis-fips, fortio-fips, metrics-serve...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.1-0.3.hum1 aarch64, x8664 prometheus3.13-3.13.1-0.3.hum1.src src Security Fixes: prometheus3.13: CVE-2026-56852...

PT-2026-64065

These are all security issues fixed in the prometheus-ha cluster exporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11340-1 prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media

These are all security issues fixed in the prometheus-haclusterexporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

AZL-93282 CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93279 CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93285 CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CLEANSTART-2026-DS82965 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-42504, CVE-2026-42507, ghsa-cp6g-7hqx-qxhp applied in versions: 0.89.0-r2, 0.89.0-r3

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LK99645 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 0.88.1-r1, 0.88.1-r2

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HD68184 Security fixes for CVE-2026-2303, CVE-2026-42504, ghsa-cp6g-7hqx-qxhp applied in versions: 3.11.3-r2, 3.11.3-r3

Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OS58683 Security fixes for CVE-2026-42504 applied in versions: 3.11.3-r2

Security vulnerability affects the prometheus package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LP13983 Security fixes for CVE-2026-2303, CVE-2026-42504, ghsa-cp6g-7hqx-qxhp applied in versions: 3.10.0-r3, 3.10.0-r4, 3.10.0-r5

Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KS96802 Security fixes for CVE-2026-39822, CVE-2026-42505 applied in versions: 3.5.3-r4

Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...