Linux Distros Unpatched Vulnerability : CVE-2022-3613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15....

Linux Distros Unpatched Vulnerability : CVE-2021-22166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method CVE-2021-22166 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2021-22178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration...

Malicious code in prometheus-stats-library (npm)

The package prometheus-stats-library was found to contain malicious code...

MAL-2025-30729 Malicious code in prometheus-stats-library (npm)

The package prometheus-stats-library was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, nfs-subdir-external-provisioner, azure-service-operator, rekor, amazon-cloudwatch-agent, helm-docs, secrets-store-csi-driver-provider-azure, aws-signer-notation-plugin, gosu, kubebuilder, helm-mapkubeapis, etcd, cilium, terraform,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: rancher-fleet, apache-beam-python-3.11-sdk, cert-manager, verticadb-operator-fips, cert-manager-csi-driver, hugo-extended, aws-nuke, kubernetes-release, nvidia-nsight-compute-12.8, kubernetes-dashboard, cyberark-secrets-provider-for-k8s, helm-push, supercronic, diren...

CVE-2025-54388 vulnerabilities

Vulnerabilities for packages: melange, wolfictl, buildah, buf, openfga, trivy, buildkitd, splunk-otel-collector, goreleaser, spire-server, opentelemetry-collector-contrib, falcoctl, opentelemetry-collector, apko, k9s, kargo, aws-otel-collector, docker-cli-buildx, osv-scanner, trufflehog, zot,...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: melange, wolfictl, buildah, buf, openfga, trivy, buildkitd, splunk-otel-collector, goreleaser, spire-server, opentelemetry-collector-contrib, falcoctl, opentelemetry-collector, apko, k9s, kargo, aws-otel-collector, docker-cli-buildx, osv-scanner, trufflehog, zot,...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: spire-server-fips, trufflehog, nerdctl, buildkitd-fips, nerdctl-fips, opentelemetry-collector-contrib, apko, goreleaser, cadvisor-fips, buildah, kargo, grype, trivy, docker-cli-buildx, openfga-fips, opentelemetry-collector-fips, spire-server, openfga,...

Security update 5.0.5 for Multi-Linux Manager Client Tools, Salt and Salt Bundle

This update fixes the following issues: golang-github-prometheus-nodeexporter: Security issues fixed: CVE-2025-22870: Prevent a matching of hosts against proxy patterns to improperly treat an IPv6 zone ID as a hostname component bsc1238686 Other bugs fixed: Fixed Darwin memory leak pressure: Fix...

SUSE-SU-2025:02478-1 Security update 5.0.5 for Multi-Linux Manager Server

This update fixes the following issues: server-attestation-image: - Version 5.0.11: Fixed the health check of the container bsc1240604 server-hub-xmlrpc-api-image: - Version 5.0.13: Image rebuilt to the newest version with updated dependencies server-image: - Version 5.0.16: Fixed...

Fedora 43 : golang-github-prometheus (2025-3afa669ec0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3afa669ec0 advisory. Automatic update for golang-github-prometheus-2.55.1-1.fc43. Changelog Thu Jul 17 2025 Mikel Olasagasti Uranga - 2.55.1-1 - Update to 2.55.1 and ado...

MAL-2025-5919 Malicious code in grafana-amazonprometheus-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7359e2541c67fe090610ee101544e2e2da0fc6232b1fff166f71c0bd3c1f0e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Grafana Labs < 10.4.17+security-01, 11.2.8+security-01, 11.3.5+security-01, 11.4.3+security-01, 11.5.3+security-01, 11.6.0+security-01 Improper Authorization (CVE-2025-3454)

The version of Grafana Labs installed on the remote host is affected by improper authorization vulnerability as referenced in the CVE-2025-3454 advisory. - This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL...

Fedora 43 : golang-github-prometheus-prom2json (2025-18547fda0a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-18547fda0a advisory. Automatic update for golang-github-prometheus-prom2json-1.4.2-1.fc43. Changelog Tue Jul 15 2025 Mikel Olasagasti Uranga - 1.4.2-1 - Update to 1.4.2 and adopt...

Malicious code in azure-prometheus-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47fd9dad2205644dc2dc1629b5ba8933f2243510d26fca0bb35e2fb3f1e602a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5765 Malicious code in azure-prometheus-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47fd9dad2205644dc2dc1629b5ba8933f2243510d26fca0bb35e2fb3f1e602a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE SLES15 / openSUSE 15 Security Update : Multi-Linux Manager Client Tools (SUSE-SU-2025:01989-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01989-1 advisory. golang-github-prometheus-prometheus was updated to version 2.53.4: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 fo...

SUSE SLES12 Security Update : Multi-Linux Manager Client Tools (SUSE-SU-2025:01987-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01987-1 advisory. golang-github-prometheus-prometheus was updated to version 2.53.4: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 for building...