325 matches found
alloy-1.20.1-1.1 on GA media (moderate)
alloy-1.20.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:12114-1 Rating: moderate Cross-References: CVE-2026-14362 CVE-2026-63209 CVE-2026-81871 CVE-2026-81872 CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-14362 SUSE : 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H...
GO-2026-6665 vulnerabilities
Vulnerabilities for packages: grafana-alloy...
CVE-2026-86597 vulnerabilities
Vulnerabilities for packages: grafana-alloy...
GHSA-5CWM-P7PJ-GQP2 vulnerabilities
Vulnerabilities for packages: grafana-alloy...
GHSA-QQJ6-54Q6-CXV6 vulnerabilities
Vulnerabilities for packages: grafana-alloy...
OPENSUSE-SU-2026:12114-1 alloy-1.20.1-1.1 on GA media
These are all security issues fixed in the alloy-1.20.1-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2026-6609 vulnerabilities
Vulnerabilities for packages: argo-workflows, continuity, grafana-alloy, spire-server, step, grafana, aactl, flux-source-controller, chartmuseum, ingress-nginx-controller, gitness, rancher-agent, grafana-pyroscope, k6, karpenter, kyverno-policy-reporter, kube-arangodb, flux, atlantis, juicefs,...
GHSA-F4XW-M386-M277 vulnerabilities
Vulnerabilities for packages: argo-workflows, continuity, grafana-alloy, spire-server, step, grafana, aactl, flux-source-controller, chartmuseum, ingress-nginx-controller, gitness, rancher-agent, grafana-pyroscope, k6, karpenter, kyverno-policy-reporter, kube-arangodb, flux, atlantis, juicefs,...
openSUSE 16 Security Update : alloy (openSUSE-SU-2026:22032-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22032-1 advisory. - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling bsc1269861. - CVE-2026-37236:...
Security update for alloy (important)
openSUSE security update: security update for alloy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22032-1 Rating: important References: bsc1267482 bsc1267483 bsc1267484 bsc1267486 bsc1267487 bsc1268982 bsc1269861 bsc1272028 bsc1272418 bsc1276742...
OPENSUSE-SU-2026:22032-1 Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling bsc1269861. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST reque...
SUSE-SU-2026:24148-1 Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling bsc1269861. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST reque...
CLEANSTART-2026-GU78315 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the grafana-alloy package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-MX93537 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the grafana-alloy package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
SUSE SLED15 / SLES15 Security Update : alloy (SUSE-SU-2026:4408-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4408-1 advisory. - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error...
SUSE-SU-2026:4408-1 Security update for alloy
This update for alloy fixes the following issues: - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling bsc1269861. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST reque...
Security update for alloy
This update for alloy fixes the following issues: CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling bsc1269861. CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request...
GO-2026-6508 vulnerabilities
Vulnerabilities for packages: harbor-registry, datadog-agent, caddy, grafana-mimir, grafana-alloy, grafana, tempo, kots, grafana-pyroscope, aws-otel-collector, amazon-cloudwatch-agent, mcp-grafana, pulumi-kubernetes-operator, traefik, falcosidekick, fluent-bit-plugin-loki, zot, distribution, loki...
CLEANSTART-2026-WM90638 Security fix for GHSA-259r-337f-4rfw applied in: grafana-alloy 1.16.3-r0
Security vulnerability affects the grafana-alloy package. This issue is resolved in later releases. See references for vulnerability details...