242 matches found
CVE-2025-59332
3DAlloy (MediaWiki extension) versions 1.0–1.8 are affected by a stored XSS due to unsanitized attributes provided to the parser tag and the {{#3d}} function, which are appended to the canvas element and can execute arbitrary JavaScript. This root cause is confirmed across multiple feeds (Red Ha...
GHSA-JC7W-C686-C4V9 vulnerabilities
Vulnerabilities for packages: terraform, gptscript, envoy-gateway, podman, vcluster, xeol, gitleaks, kubescape-operator, opentofu, nsc, trivy, filebrowser, zarf, gitness, zot, trivy-operator, grafana-alloy, tflint, nuclei, trufflehog, guac, k9s, undock, rancher-fleet, terragrunt, steampipe...
CVE-2025-58058 vulnerabilities
Vulnerabilities for packages: terraform, gptscript, envoy-gateway, podman, vcluster, xeol, gitleaks, kubescape-operator, opentofu, nsc, trivy, filebrowser, zarf, gitness, zot, trivy-operator, grafana-alloy, tflint, nuclei, trufflehog, guac, k9s, undock, rancher-fleet, terragrunt, steampipe...
Malicious code in alloy-widget-npm (npm)
The package alloy-widget-npm was found to contain malicious code...
MAL-2025-14326 Malicious code in alloy-widget-npm (npm)
The package alloy-widget-npm was found to contain malicious code...
OPENSUSE-SU-2025:15207-1 alloy-1.9.1-1.1 on GA media
These are all security issues fixed in the alloy-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2013-6874
Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file...
BIT-GRAFANA-ALLOY-2024-8975 Grafana Alloy on Windows Unquoted service path
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...
GHSA-6JGM-J7H2-2FQG vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, opentelemetry-collector-contrib, splunk-otel-collector-fips, vault, grafana-alloy, sqlexporter, opentelemetry-collector-contrib-fips, splunk-otel-collector, sqlexporter-fips...
CVE-2025-46327 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, opentelemetry-collector-contrib, splunk-otel-collector-fips, vault, grafana-alloy, sqlexporter, opentelemetry-collector-contrib-fips, splunk-otel-collector, sqlexporter-fips...
CVE-2025-46327 vulnerabilities
Vulnerabilities for packages: grafana-alloy, sqlexporter, opentelemetry-collector-contrib, splunk-otel-collector...
GHSA-6JGM-J7H2-2FQG vulnerabilities
Vulnerabilities for packages: grafana-alloy, sqlexporter, opentelemetry-collector-contrib, splunk-otel-collector...
CVE-2025-29786 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, nats, splunk-otel-collector, kubeflow-pipelines, argo-workflows, opentelemetry-collector-contrib, argo-rollouts, grafana-alloy, kargo, k8sgpt, amazon-cloudwatch-agent...
SUSE CVE-2024-8975
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...
OPENSUSE-SU-2024:14439-1 alloy-1.4.3-1.1 on GA media
These are all security issues fixed in the alloy-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2024-3168 Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability in github.com/grafana/alloy
Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability in github.com/grafana/alloy...
The vulnerability of the Grafana Alloy data visualization system lies in the absence of quotation marks when writing elements or search paths. This allows attackers to escalate their privileges.
The vulnerability of the Grafana Alloy data visualization system is related to the absence of quotation marks in the wording of elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges...
GHSA-CHQX-36RM-RF8H Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Alloy: before 1.3.4, from 1.4.0-rc.0 and prior to 1.4.1...
Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Alloy: before 1.3.4, from 1.4.0-rc.0 and prior to 1.4.1...
