514 matches found
GHSA-8WV5-X4W7-5GWW vulnerabilities
Vulnerabilities for packages: wavefront-proxy, grafana, tempo, amazon-cloudwatch-agent, jaeger, nri-cassandra, temporal, jitsucom-bulker, nri-jmx, nri-kafka, seaweedfs, datadog-agent, bento, telegraf, minio...
CVE-2026-43871 vulnerabilities
Vulnerabilities for packages: wavefront-proxy, grafana, tempo, amazon-cloudwatch-agent, jaeger, nri-cassandra, temporal, jitsucom-bulker, nri-jmx, nri-kafka, seaweedfs, datadog-agent, bento, telegraf, minio...
AZL-99384 CVE-2026-78662 affecting package telegraf 1.31.0-28
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99381 CVE-2026-56855 affecting package telegraf 1.31.0-28
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
AZL-99387 CVE-2026-84304 affecting package telegraf 1.31.0-28
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...
AZL-98436 CVE-2026-37236 affecting package telegraf 1.31.0-28
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...
AZL-98214 CVE-2026-79921 affecting package telegraf 1.31.0-28
amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial ...
GO-2026-6253 vulnerabilities
Vulnerabilities for packages: openbao-fips, buildkitd-fips, kaniko, kubescape-server, docker-cli-buildx, kubescape-server-fips, ctop-fips, buildkitd, falcoctl, openbao, podman-fips, kubescape, telegraf, buildah-fips, kaniko-fips, skaffold, skaffold-fips, podman, buildah, docker-cli-buildx-fips,...
GO-2026-6183 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6185 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6188 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6195 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6197 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6190 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6196 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6199 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6191 vulnerabilities
Vulnerabilities for packages: telegraf...