1666 matches found
GHSA-V6V8-XJ6M-XWQH vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-kubernetes-operator, fulcio, vexctl, pulumi, argo-cd, goreleaser, flux-helm-controller, falcoctl, terraform, kubernetes-event-exporter, tekton-chains-fips, ksops, falcoctl-fips, buildkitd, fulcio-fips, rekor,...
AZL-42898 CVE-2024-6104 affecting package prometheus for versions less than 2.45.4-3
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
AZL-42928 CVE-2024-6104 affecting package prometheus for versions less than 2.37.0-14
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
CVE-2024-6104 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-kubernetes-operator, fulcio, vexctl, pulumi, argo-cd, goreleaser, flux-helm-controller, falcoctl, terraform, kubernetes-event-exporter, tekton-chains-fips, ksops, falcoctl-fips, buildkitd, fulcio-fips, rekor,...
Security Bulletin: IBM DataPower Gateway is vulnerable to denial of service due to Golang Go
Summary IBM DataPower Gateway is vulnerable to denial of service due to use of Golang Go in DataPower Operator and Prometheus Metrics . CVE-2024-24783 Vulnerability Details CVEID:CVE-2024-24783 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw in the crypto/x509 packag...
OPENSUSE-SU-2024:13599-1 golang-github-prometheus-alertmanager-0.26.0-4.1 on GA media
These are all security issues fixed in the golang-github-prometheus-alertmanager-0.26.0-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12872-1 prometheus-postgres_exporter-0.10.1-2.1 on GA media
These are all security issues fixed in the prometheus-postgresexporter-0.10.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12691-1 prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-2.1 on GA media
These are all security issues fixed in the prometheus-haclusterexporter-1.3.1+git.1676027782.ad3c0e9-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13604-1 golang-github-prometheus-prometheus-2.48.1-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-2.48.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12904-1 prometheus-blackbox_exporter-0.19.0-13.1 on GA media
These are all security issues fixed in the prometheus-blackboxexporter-0.19.0-13.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12637-1 golang-github-prometheus-node_exporter-1.5.0-1.1 on GA media
These are all security issues fixed in the golang-github-prometheus-nodeexporter-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12650-1 golang-github-prometheus-prometheus-2.41.0-1.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-2.41.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10814-1 golang-github-prometheus-prometheus-2.27.1-4.2 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-2.27.1-4.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13143-1 golang-github-prometheus-prometheus-2.46.0-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-2.46.0-2.1 package on the GA media of openSUSE Tumbleweed...
Report Generation Fails with "lookup prometheus-server-exp: no such host"
Challenge After enabling Veeam Kasten for Kubernetes reports, reports are not generated. When running an on-demand report policy, the following error message is observed within the executor logs: "message":"Post "http://prometheus-server-exp:80/k10/prometheus/api/v1/query": dial tcp: lookup...
GHSA-M5VV-6R4H-3VJ9 vulnerabilities
Vulnerabilities for packages: fulcio, pulumi, trivy-fips, boring-registry, argo-cd, goreleaser, falcoctl, prometheus-operator-fips, thanos, secrets-store-csi-driver-provider-azure, tekton-chains-fips, ksops, falcoctl-fips, buildkitd, step, fulcio-fips, rekor, sqlpad, velero, grafana-mimir,...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: pulumi, bank-vaults, argo-events, sigstore-scaffolding, rclone, sqlpad, tkn, zot, sops, kubescape, wal-g, druid, grafana-agent-operator, chezmoi, guac, py3-azure-identity, rekor, step-ca, timestamp-authority, velero, buildkitd, goreleaser, airflow, prometheus-operato...
AZL-42646 CVE-2024-35255 affecting package prometheus for versions less than 2.45.4-12
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
