183 matches found
cnitch
cnitch cnitch snitch or container snitch is a simple framework and command line tool for monitoring Docker containers to identify any processes which are running as root. Why is this a bad thing? If you have not already been to can I haz non-privileged containers? by mhausenblas then I recommend...
io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing
A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary...
io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing
A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary...
io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing
A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary...
CLEANSTART-2026-DO56423 Security fixes in prometheus-statsd-exporter 0.29.0-r0
Package prometheus-statsd-exporter version 0.29.0-r0 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...
CLEANSTART-2026-AW19890 Security fixes in prometheus-statsd-exporter 0.27.2-r1
Package prometheus-statsd-exporter version 0.27.2-r1 fixes 10 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CVE-2026-59296
A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary...
CRLF Injection
Overview Affected versions of this package are vulnerable to CRLF Injection through DatadogStatsdLineBuilder, EtsyStatsdLineBuilder, and the Printer in LoggingMeterRegistry. An attacker can spoof metrics or log entries by supplying meter names, tag keys, or tag values containing \n or \r, causing...
CRLF Injection
Overview Affected versions of this package are vulnerable to CRLF Injection through DatadogStatsdLineBuilder, EtsyStatsdLineBuilder, and the Printer in LoggingMeterRegistry. An attacker can spoof metrics or log entries by supplying meter names, tag keys, or tag values containing \n or \r, causing...
ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115), ai.chronon:service_2.12 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +149 more potentially affected by CVE-2026-59296 via io.micrometer:micrometer-registry-statsd (>=1.0.0-rc.2, <=1.16.6)
io.micrometer:micrometer-registry-statsd MAVEN version =1.0.0-rc.2, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.1.29, =0.1.29, =0.16.0, =0.1.5, =0.1.21, =0.16.0, =1.1.0, =1.0.0.release,...
com.solace.connector.core:pubsubplus-connector-framework (4.0.0), org.apereo.cas:cas-server-core-monitor (>=8.0.0-rc6, <=8.0.2) +24 more potentially affected by CVE-2026-59296 via io.micrometer:micrometer-registry-statsd (1.17.0)
io.micrometer:micrometer-registry-statsd MAVEN version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-registry-statsd and may be impacted: - com.solace.connector.core:pubsubplus-connector-framework 4.0.0 -...
CVE-2026-59296
Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16...
CVE-2026-59296 Micrometer StatsD and Logging meter registries line-protocol and log injection vulnerability
Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16...
CVE-2026-59296 Micrometer StatsD and Logging meter registries line-protocol and log injection vulnerability
Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform. When such unsafe instrumentation is used, the application becomes vulnerable to injection and spoofing...
EUVD-2026-63885
Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform. When such unsafe instrumentation is used, the application becomes vulnerable to injection and spoofing...
de.dm.infrastructure:micrometer-metrics-wrapper (4.0.0), io.micronaut.micrometer:micronaut-micrometer-registry-statsd (>=6.0.0-m2, <=6.0.1) +27 more potentially affected by CVE-2026-59296 via io.micrometer:micrometer-registry-statsd (>=1.16.0, <=1.16.6)
io.micrometer:micrometer-registry-statsd MAVEN version =1.16.0, =6.0.0-m2, =3.5.0, =3.5.0, =3.6.0 - org.apereo.cas:cas-server-core-monitor 8.0.0-rc1 - org.apereo.cas:cas-server-support-aws-cloudwatch 8.0.0-rc1 - org.apereo.cas:cas-server-support-hazelcast-monitor 8.0.0-rc1 -...
com.solace.connector.core:pubsubplus-connector-framework (4.0.0), org.apereo.cas:cas-server-core-monitor (>=8.0.0-rc6, <=8.0.2) +24 more potentially affected by CVE-2026-59296 via io.micrometer:micrometer-registry-statsd (1.17.0)
io.micrometer:micrometer-registry-statsd MAVEN version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-registry-statsd and may be impacted: - com.solace.connector.core:pubsubplus-connector-framework 4.0.0 -...
CVE-2026-59296
CVE-2026-59296 affects io.micrometer:micrometer-registry-statsd and io.micrometer:micrometer-core , which do not sanitize newline characters (\n, \r) in metric names, tag keys, or tag values by default. When an application instruments meters using user-controlled, unvalidated input , an attacker ...
PT-2026-79355
Name of the Vulnerable Software and Affected Versions io.micrometer:micrometer-registry-statsd affected versions not specified io.micrometer:micrometer-core affected versions not specified Description Failure to sanitize newline characters , r in metrics data allows for injection and spoofing...
