CVE-2026-83530 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-83530 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...

CVE-2026-78662 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-78662 affecting package telegraf for versions less than 1.31.0-33. A patched version of the package is available...

CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...

CVE-2026-37236 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-37236 affecting package telegraf for versions less than 1.31.0-33. A patched version of the package is available...

CVE-2026-84304 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-84304 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...

CVE-2026-56855 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-56855 affecting package telegraf for versions less than 1.31.0-33. A patched version of the package is available...

GO-2026-6372 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, argo-events, keda, bento, minio, falcosidekick, telegraf, guac, dapr, trufflehog, sftpgo-plugin-pubsub...

AZL-103287 CVE-2026-77406 affecting package telegraf 1.31.0-33

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.Qos in channel.go accepts negative prefetchCount and prefetchSize integers and casts them directly to uint16 and uint32 fields in the basic.qos method because validateQos is absent. Values such as -1 therefore wrap to 65535 o...

AZL-103296 CVE-2026-77403 affecting package telegraf 1.31.0-33

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Connection.openTune in connection.go accepts a server-advertised FrameMax below the AMQP frameMinSize value of 4096 bytes because the connection negotiation loop does not enforce the protocol minimum. A malicious or compromised AMQP...

Malicious code in discord-players (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eadb25768efba4ff9dc9170a838f90f6572993195d37e526543fa956e65faa2 index.js is the package main and unconditionally starts a backup loop at module top level. On require, BackupManager zips process.cwd excluding...

AZL-100950 CVE-2026-83530 affecting package telegraf for versions less than 1.31.0-33

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

GHSA-8WV5-X4W7-5GWW vulnerabilities

Vulnerabilities for packages: zipkin, jaeger, jitsucom-bulker, nri-kafka, tempo, bento, minio, wavefront-proxy, datadog-agent, grafana, nri-jmx, seaweedfs, nri-cassandra, temporal, amazon-cloudwatch-agent, telegraf...

CVE-2026-43871 vulnerabilities

Vulnerabilities for packages: zipkin, jaeger, jitsucom-bulker, nri-kafka, tempo, bento, minio, wavefront-proxy, datadog-agent, grafana, nri-jmx, seaweedfs, nri-cassandra, temporal, amazon-cloudwatch-agent, telegraf...

CVE-2026-79921 affecting package telegraf for versions less than 1.31.0-31

CVE-2026-79921 affecting package telegraf for versions less than 1.31.0-31. A patched version of the package is available...

AZL-99384 CVE-2026-78662 affecting package telegraf for versions less than 1.31.0-33

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99381 CVE-2026-56855 affecting package telegraf for versions less than 1.31.0-33

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-99387 CVE-2026-84304 affecting package telegraf for versions less than 1.31.0-33

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-98436 CVE-2026-37236 affecting package telegraf for versions less than 1.31.0-33

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

AZL-98214 CVE-2026-79921 affecting package telegraf for versions less than 1.31.0-31

amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial ...

GO-2026-6253 vulnerabilities

Vulnerabilities for packages: kaniko, falcoctl, docker-cli-buildx-fips, skaffold, skaffold-fips, openbao, kubescape, kubescape-server-fips, buildkitd, kubescape-server, kaniko-fips, openbao-fips, falcoctl-fips, podman, docker-fips, buildkitd-fips, telegraf, docker-cli-buildx, buildah, buildah-fip...