GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, bank-vaults-fips, volume-modifier-for-k8s-fips, terraform-provider-sendgrid, kubernetes-csi-livenessprobe, buildkitd, k3d, aws-efs-csi-driver-fips, prometheus-blackbox-exporter, src, spark-operator, cortex, dgraph, prometheus-stackdriver-exporter, kiam,...

CVE-2023-39325 affecting package telegraf for versions less than 1.27.3-3

CVE-2023-39325 affecting package telegraf for versions less than 1.27.3-3. A patched version of the package is available...

CVE-2023-44487 affecting package telegraf for versions less than 1.27.3-3

CVE-2023-44487 affecting package telegraf for versions less than 1.27.3-3. A patched version of the package is available...

AZL-35302 CVE-2023-39325 affecting package telegraf for versions less than 1.27.3-3

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-31616 CVE-2023-39325 affecting package telegraf for versions less than 1.27.3-3

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: k8sgpt, k3s, gke-gcloud-auth-plugin, kpt, timoni, vault-k8s, aws-efs-csi-driver-fips, prometheus-mongodb-exporter, kubernetes-dashboard, prometheus-node-exporter-fips, gitness, terraform, pulumi-language-yaml, git-lfs, metacontroller, prometheus-statsd-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nginx-mainline, gke-gcloud-auth-plugin, kpt, aws-efs-csi-driver-fips, ip-masq-agent, gitness, terraform, cortex, nghttp2, pulumi-language-yaml, git-lfs, metacontroller, grype, frp, hugo, metrics-server-fips, dynamic-localpv-provisioner-fips, stakater-reloader,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: buildkitd, k3d, mc, secrets-store-csi-driver-provider-gcp, secrets-store-csi-driver, kubernetes-csi-livenessprobe, cortex, pulumi-language-java, weaviate, nri-prometheus, slsa-verifier, flux-notification-controller, terraform-provider-sendgrid, ip-masq-agent, nghttp2...

AZL-31498 CVE-2023-44487 affecting package telegraf for versions less than 1.27.3-3

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-35297 CVE-2023-44487 affecting package telegraf for versions less than 1.27.3-3

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-27831 CVE-2023-3978 affecting package telegraf for versions less than 1.27.4-1

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...

AZL-35299 CVE-2023-3978 affecting package telegraf for versions less than 1.29.4-1

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...

Important Photon OS Security Update - PHSA-2023-3.0-0615

Updates of 'bindutils', 'telegraf' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-4.0-0428

Updates of 'gnuplot', 'telegraf' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0041

Updates of 'dnsmasq', 'nodejs', 'telegraf', 'openssl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0041

Updates of 'dnsmasq', 'nodejs', 'openssl', 'telegraf' packages of Photon OS have been released...

AZL-27396 CVE-2023-2816 affecting package telegraf for versions less than 1.28.5-1

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the services corresponding to those...

AZL-35303 CVE-2023-2816 affecting package telegraf for versions less than 1.29.4-1

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the services corresponding to those...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / golang / kubevirt / skopeo / telegraf (CVE-2022-41723)

The version of application-gateway-kubernetes-ingress / golang / kubevirt / skopeo / telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41723 advisory. - A maliciously crafted HTTP/2 stream...

CVE-2022-41723 affecting package telegraf for versions less than 1.26.0-2

CVE-2022-41723 affecting package telegraf for versions less than 1.26.0-2. An upgraded version of the package is available that resolves this issue...