58 matches found
SUSE CVE-2025-41118
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...
GO-2026-6609 vulnerabilities
Vulnerabilities for packages: loki, rancher, argo-workflows, continuity, rclone, falco-no-driver, grafana-pyroscope, flux, temporal-ui-server, cert-manager, kyverno-policy-reporter, rancher-agent, kube-arangodb, cert-manager-webhook-pdns, terragrunt, gitlab-pages, mesosphere-vsphere-csi, step,...
GO-2026-6600 vulnerabilities
Vulnerabilities for packages: k8sgpt, secrets-store-csi-driver, spire-controller-manager, rancher, rook, grafana-rollout-operator, melange, cloud-provider-azure, neuvector-scanner, secrets-store-csi-driver-provider-aws, flux, temporal-ui-server, wal-g, gcsfuse, kube-arangodb, cert-manager-cmctl,...
GHSA-F4XW-M386-M277 vulnerabilities
Vulnerabilities for packages: loki, rancher, argo-workflows, continuity, rclone, falco-no-driver, grafana-pyroscope, flux, temporal-ui-server, cert-manager, kyverno-policy-reporter, rancher-agent, kube-arangodb, cert-manager-webhook-pdns, terragrunt, gitlab-pages, mesosphere-vsphere-csi, step,...
GO-2026-5501 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope...
GO-2025-3833 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope...
GO-2026-5030 vulnerabilities
Vulnerabilities for packages: prometheus-operator, kyverno, k3s, opentelemetry-collector, telegraf, vale, step-issuer, terraform-provider-acme, falco-no-driver, glab, flux, kots, grafana-pyroscope, helm, crossplane-provider-azure-storage, step, kubernetes, zot, mattermost, fq, kine, traefik,...
GO-2026-5662 vulnerabilities
Vulnerabilities for packages: loki, prometheus-pushgateway, datadog-agent, aws-otel-collector, telegraf, grafana-pyroscope, jaeger, minio-operator, trillian, mc, tempo, cloud-sql-proxy, minio-object-browser, istio, karma, certificate-transparency, minio, keda, mcp-grafana, splunk-otel-collector...
GO-2026-5327 vulnerabilities
Vulnerabilities for packages: bento, external-secrets-operator, cilium, migrate, datadog-agent, cortex, tetragon, grafana-pyroscope, opentelemetry-collector-contrib, wal-g, promxy, consul-k8s, terraform-provider-pagerduty, slsa-verifier, grafana-agent-operator, juicefs, weaviate, dapr,...
GO-2026-5501 Pyroscope Exposes Storage Secret in github.com/grafana/pyroscope
Pyroscope Exposes Storage Secret in github.com/grafana/pyroscope...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: keda-fips, longhorn-manager, rekor, promxy-fips, prometheus-podman-exporter-fips, gitness, k8sgateway, crossplane-provider-azure-purview, crossplane-provider-aws-chime-fips, trident, harbor-registry, crossplane-provider-aws-rolesanywhere, crossplane-provider-keycloak...
CVE-2025-41118 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope...
GHSA-M9HQ-H476-H2G8 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope...
CVE-2025-41118 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope...
GHSA-M9HQ-H476-H2G8 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope...
BIT-GRAFANA-PYROSCOPE-2025-41118 Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...
CVE-2025-41118
A flaw was found in Pyroscope. When Tencent Cloud Object Storage COS is configured as the storage backend, an attacker with access to the Pyroscope API can extract the secretkey value in plaintext. This issue leads to sensitive information disclosure. Mitigation To mitigate this vulnerability,...
EUVD-2025-209489
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...
Pyroscope Exposes Storage Secret
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...
GHSA-M9HQ-H476-H2G8 Pyroscope Exposes Storage Secret
Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...