SUSE: Security Advisory (SUSE-SU-2026:20232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-26069 Scraparr Readarr Integration exposes sensitive values as metric labels.

Scraparr is a Prometheus Exporter for various components of the arr Suite. From 3.0.0-beta to before 3.0.2, when the Readarr integration was enabled, the exporter exposed the configured Readarr API key as the alias metric label value. Users were affected only if all of the following conditions ar...

CVE-2026-26069

Scraparr (Prometheus Exporter) prior to 3.0.2 is affected when Readarr integration is enabled and the exporter’s /metrics is exposed to outsiders. The Readarr API key could be exposed as the alias metric label value, under conditions: Readarr scraping enabled, no alias configured, /metrics public...

CVE-2026-26069

Scraparr is a Prometheus Exporter for various components of the arr Suite. From 3.0.0-beta to before 3.0.2, when the Readarr integration was enabled, the exporter exposed the configured Readarr API key as the alias metric label value. Users were affected only if all of the following conditions ar...

[SECURITY] Fedora 42 Update: rust-monitord-exporter-0.4.1-8.fc42

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

CLEANSTART-2026-LS08172 Within HostnameError

Multiple security vulnerabilities affect the prometheus-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: mountpoint-s3-csi-driver, kubernetes-csi-external-health-monitor, postgres-operator, pulumi-kubernetes-operator, kubeflow-pipelines, knative-client, helm, juicefs, grafana-agent-operator, prometheus-blackbox-exporter, glab, kserve-modelmesh-serving,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, mountpoint-s3-csi-driver, kubernetes-csi-external-health-monitor, postgres-operator, pulumi-kubernetes-operator, kubeflow-pipelines, knative-client, helm, juicefs, grafana-agent-operator, multus-cni, prometheus-blackbox-exporter, sbom-convert,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: mountpoint-s3-csi-driver, kubernetes-csi-external-health-monitor, postgres-operator, pulumi-kubernetes-operator, kubeflow-pipelines, knative-client, helm, juicefs, grafana-agent-operator, prometheus-blackbox-exporter, glab, kserve-modelmesh-serving,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: smarter-device-manager, mountpoint-s3-csi-driver, kubernetes-csi-external-health-monitor, postgres-operator, pulumi-kubernetes-operator, kubeflow-pipelines, knative-client, helm, juicefs, grafana-agent-operator, multus-cni, prometheus-blackbox-exporter, sbom-convert,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: swagger, spiffe-helper-fips, grafana-operator-fips, karpenter-fips, blob-csi, qemu-guesthelper, kubernetes-dashboard-api, prometheus-node-exporter, terraform-provider-tls-fips, tempo, node-feature-discovery-fips, crossplane-provider-keycloak-fips, spark-operator-fips...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: swagger, spiffe-helper-fips, grafana-operator-fips, karpenter-fips, blob-csi, qemu-guesthelper, kubernetes-dashboard-api, prometheus-node-exporter, terraform-provider-tls-fips, tempo, node-feature-discovery-fips, crossplane-provider-keycloak-fips, spark-operator-fips...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: swagger, spiffe-helper-fips, grafana-operator-fips, karpenter-fips, blob-csi, qemu-guesthelper, kubernetes-dashboard-api, prometheus-node-exporter, terraform-provider-tls-fips, tempo, node-feature-discovery-fips, crossplane-provider-keycloak-fips, spark-operator-fips...

[SECURITY] Fedora 43 Update: rust-monitord-exporter-0.4.1-8.fc43

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

[SECURITY] Fedora 42 Update: node-exporter-1.10.2-3.fc42

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

[SECURITY] Fedora 43 Update: node-exporter-1.10.2-3.fc43

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

AZL-77073 CVE-2025-58190 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76983 CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77070 CVE-2025-47911 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

SUSE-SU-2026:20232-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: Update to version 3.5.0: Security issues fixed: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global bsc1257329. - CVE-2025-12816: interpretation conflict...