Azure Linux 3.0 Security Update: azcopy / git-lfs / golang / influxdb / keda (CVE-2025-22870)

The version of azcopy / git-lfs / golang / influxdb / keda installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22870 advisory. - Matching of hosts against proxy patterns can improperly treat an IPv6...

CVE-2025-22870 affecting package telegraf for versions less than 1.31.0-6

CVE-2025-22870 affecting package telegraf for versions less than 1.31.0-6. A patched version of the package is available...

CVE-2024-51744 affecting package telegraf for versions less than 1.31.0-6

CVE-2024-51744 affecting package telegraf for versions less than 1.31.0-6. A patched version of the package is available...

AZL-59235 CVE-2025-30204 affecting package telegraf for versions less than 1.29.4-13

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-59196 CVE-2025-30204 affecting package telegraf for versions less than 1.31.0-7

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

CVE-2025-29923 vulnerabilities

Vulnerabilities for packages: falcosidekick, splunk-otel-collector-fips, opentelemetry-collector-contrib-fips, argo-cd-fips, dapr, dapr-fips, kots, splunk-otel-collector, gitea-fips, mattermost-fips, oauth2-proxy, atlantis, gitea, traefik-fips, falcosidekick-fips, rekor-fips, loki, loki-fips,...

GHSA-92CP-5422-2MW7 vulnerabilities

Vulnerabilities for packages: falcosidekick, splunk-otel-collector-fips, opentelemetry-collector-contrib-fips, argo-cd-fips, dapr, dapr-fips, kots, splunk-otel-collector, gitea-fips, mattermost-fips, oauth2-proxy, atlantis, gitea, traefik-fips, falcosidekick-fips, rekor-fips, loki, loki-fips,...

CVE-2025-22869 affecting package telegraf for versions less than 1.31.0-5

CVE-2025-22869 affecting package telegraf for versions less than 1.31.0-5. A patched version of the package is available...

CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-5

CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-5. A patched version of the package is available...

CVE-2025-27144 affecting package telegraf for versions less than 1.29.4-12

CVE-2025-27144 affecting package telegraf for versions less than 1.29.4-12. A patched version of the package is available...

AZL-58440 CVE-2025-22870 affecting package telegraf for versions less than 1.29.4-15

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

AZL-58416 CVE-2025-22870 affecting package telegraf for versions less than 1.31.0-7

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

CVE-2025-22868 affecting package telegraf for versions less than 1.29.4-11

CVE-2025-22868 affecting package telegraf for versions less than 1.29.4-11. A patched version of the package is available...

CVE-2025-22869 affecting package telegraf for versions less than 1.29.4-11

CVE-2025-22869 affecting package telegraf for versions less than 1.29.4-11. A patched version of the package is available...

AZL-57440 CVE-2025-22869 affecting package telegraf for versions less than 1.29.4-13

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57389 CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-7

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57467 CVE-2025-22868 affecting package telegraf for versions less than 1.29.4-13

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57350 CVE-2025-22869 affecting package telegraf for versions less than 1.31.0-7

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57174 CVE-2025-27144 affecting package telegraf for versions less than 1.31.0-9

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

AZL-57177 CVE-2025-27144 affecting package telegraf for versions less than 1.29.4-13

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...