CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21

CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: containerd-fips, k6-fips, gitlab-runner-fips, scorecard, kube-metrics-adapter-fips, datadog-operator, spire-server, temporal-server, zot, kubevirt-cdi-operator-fips, skaffold-fips, ceph-csi-operator-fips, cluster-api-provider-vsphere-fips, external-secrets-operator,...

CVE-2026-27571 affecting package telegraf for versions less than 1.31.0-13

CVE-2026-27571 affecting package telegraf for versions less than 1.31.0-13. A patched version of the package is available...

CVE-2026-27571 affecting package telegraf for versions less than 1.29.4-19

CVE-2026-27571 affecting package telegraf for versions less than 1.29.4-19. A patched version of the package is available...

AZL-78372 CVE-2026-27571 affecting package telegraf for versions less than 1.29.4-21

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The WebSockets handling of NATS messages handles compressed messages via the WebSockets negotiated compression. Prior to versions 2.11.2 and 2.12.3, the implementation bound the memory size of a NATS...

CVE-2026-26014 vulnerabilities

Vulnerabilities for packages: telegraf, ipfs-cluster, k3s, kubo, spegel...

GHSA-9F3F-WV7R-QC8R vulnerabilities

Vulnerabilities for packages: telegraf, ipfs-cluster, k3s, kubo, spegel...

AZL-78216 CVE-2026-26958 affecting package telegraf 1.31.0-15

filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If Point.MultiScalarMult i...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, seaweedfs, mariadb-operator, spire-server, step-ca, trillian, flux-kustomize-controller, ksops, step-kms-plugin, sftpgo, ratify, sftpgo-plugin-eventstore, dgraph, minio, step-issuer, openfga, telegraf, tailscale, chezmoi, trufflehog, k3s, rekor,...

AZL-77645 CVE-2026-26014 affecting package telegraf for versions less than 1.29.4-21

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...

AZL-77649 CVE-2026-26014 affecting package telegraf for versions less than 1.31.0-15

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...

AZL-77547 CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21

The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not...

AZL-77559 CVE-2026-2303 affecting package telegraf for versions less than 1.31.0-15

The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not...

AZL-77055 CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77102 CVE-2025-58190 affecting package telegraf for versions less than 1.31.0-15

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77099 CVE-2025-47911 affecting package telegraf for versions less than 1.31.0-15

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77052 CVE-2025-47911 affecting package telegraf for versions less than 1.29.4-21

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-75557 CVE-2025-11065 affecting package telegraf for versions less than 1.31.0-15

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75576 CVE-2025-11065 affecting package telegraf for versions less than 1.29.4-21

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

Ubuntu: Security Advisory (USN-7966-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...