GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: minio-fips, crossplane-provider-aws-cloudsearch-fips, gatekeeper, gatekeeper-fips, crossplane-provider-aws-sesv2-fips, kube-arangodb-fips, loki, crossplane-provider-aws-appflow-fips, aactl, crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-emr,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: minio-fips, crossplane-provider-aws-cloudsearch-fips, gatekeeper, gatekeeper-fips, crossplane-provider-aws-sesv2-fips, kube-arangodb-fips, loki, crossplane-provider-aws-appflow-fips, aactl, crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-emr,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: argo-workflows, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, aactl, spire-server, commercial-expanso-edge, podman-fips, external-secrets-operator-fips, argo-cd, commercial-kyverno, prometheus-fips, gitlab-rails-ce-fips, vitess, containerd,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: argo-workflows, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, openbao, loki, witness, aactl, argo-events, spire-server, chezmoi, commercial-expanso-edge, podman-fips, external-secrets-operator-fips, skaffold, k9s-fips, argo-cd, gptscript, commercial-kyverno,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: argo-workflows, chisel, minio-fips, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, witness, aactl, argo-events, rancher-machine, spire-server, chezmoi, peerdb-flow, commercial-expanso-edge, podman-fips, external-secrets-operator-fips, skaffold,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: argo-workflows, gatekeeper, gatekeeper-fips, flux, kube-arangodb-fips, loki, aactl, spire-server, commercial-expanso-edge, podman-fips, external-secrets-operator-fips, argo-cd, commercial-kyverno, prometheus-fips, gitlab-rails-ce-fips, vitess, containerd,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: argocd-image-updater, gitsign, prometheus, telegraf, terragrunt, mattermost, argo-cd, containerd, guac, helm, kyverno, external-secrets-operator, falco-no-driver, k3s, istio, opentofu, argo-events...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cert-manager, kyverno, helm, falco-no-driver, nerdctl, chisel, snyk-cli, mattermost, rancher, loki, kubescape, kubernetes, istio, flux-source-controller, rancher-agent, external-dns, k3s, opentelemetry-collector, argocd-image-updater, aactl, prometheus, gitlab-kas,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cert-manager, kyverno, helm, falco-no-driver, nerdctl, kubernetes-dashboard, chisel, snyk-cli, mattermost, rancher, loki, kubescape, kubernetes, istio, flux-source-controller, rancher-agent, external-dns, k3s, opentelemetry-collector, argocd-image-updater, aactl,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: datadog-agent, dagger, podman, cert-manager, kyverno, helm, falco-no-driver, nerdctl, syft, snyk-cli, nuclei, mattermost, guac, loki, pulumi-language-yaml, splunk-otel-collector, kubescape, kubernetes, istio, apko, flux-source-controller, external-dns, argo-events,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: podman, cert-manager, kyverno, helm, falco-no-driver, nerdctl, snyk-cli, mattermost, rancher, loki, buildah, kubernetes, istio, rancher-agent, k3s, external-dns, opentelemetry-collector, aactl, prometheus, gitlab-kas, cloud-provider-aws, external-secrets-operator,...

SUSE CVE-2026-40011

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires...

GO-2026-5710 Prometheus Azure AD remote write OAuth client secret exposed via config API in github.com/prometheus/prometheus

Prometheus Azure AD remote write OAuth client secret exposed via config API in github.com/prometheus/prometheus...

GO-2026-5662 Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus

Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus...

GO-2026-5381 Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display in github.com/prometheus/prometheus

Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display in github.com/prometheus/prometheus...

GO-2026-5264 Prometheus: Remote read endpoint allows denial of service via crafted snappy payload in github.com/prometheus/prometheus

Prometheus: Remote read endpoint allows denial of service via crafted snappy payload in github.com/prometheus/prometheus...

GO-2026-5215 Ironic Standalone Operator's prometheus metrics exporter bound to all interfaces in github.com/metal3-io/ironic-standalone-operator

Ironic Standalone Operator's prometheus metrics exporter bound to all interfaces in github.com/metal3-io/ironic-standalone-operator...

CVE-2026-40011

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires...

CVE-2026-40011

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires...

EUVD-2026-39346

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires...