OPENSUSE-SU-2026:10744-1 alloy-1.16.1-1.1 on GA media

These are all security issues fixed in the alloy-1.16.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-WF45-Q9CH-Q8GH vulnerabilities

Vulnerabilities for packages: apm-server-fips, plutono, peerdb-flow, grafana-alloy-fips, dapr, loki-fips, opentelemetry-collector, bento-fips, datadog-agent-fips, amazon-cloudwatch-agent, seaweedfs-fips, elastic-agent, tempo-fips, datadog-agent, bento, agentbeat, minio-fips, nri-jmx,...

CVE-2026-41602 vulnerabilities

Vulnerabilities for packages: apm-server-fips, plutono, peerdb-flow, grafana-alloy-fips, dapr, loki-fips, opentelemetry-collector, bento-fips, datadog-agent-fips, amazon-cloudwatch-agent, seaweedfs-fips, elastic-agent, tempo-fips, datadog-agent, bento, agentbeat, minio-fips, nri-jmx,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, gitlab-rails-ce, amazon-ssm-agent-fips, pulumi-language-java, cerbos, grype-fips, flux-image-automation-controller-fips, src-fingerprint, grafana-alloy, gitsign, gptscript, crossplane-fips, trivy, gomplate-fips, pulumi-language-yaml, packer, gryp...

alloy-1.16.0-2.1 on GA media (moderate)

alloy-1.16.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10669-1 Rating: moderate Cross-References: CVE-2026-4427 CVSS scores: CVE-2026-4427 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-4427 SUSE : 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10669-1 alloy-1.16.0-2.1 on GA media

These are all security issues fixed in the alloy-1.16.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10618-1 alloy-1.15.1-1.1 on GA media

These are all security issues fixed in the alloy-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-21726 vulnerabilities

Vulnerabilities for packages: grafana, grafana-alloy...

GHSA-497X-RRR9-68JP vulnerabilities

Vulnerabilities for packages: grafana, grafana-alloy...

GHSA-497X-RRR9-68JP vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, grafana-fips, commercial-grafana, grafana-alloy, grafana...

CVE-2026-21726 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, grafana-fips, commercial-grafana, grafana-alloy, grafana...

CLEANSTART-2026-ML41879 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-32287, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, ghsa-37cx-329c-33x3, ghsa-6g7g-w4f8-9c9x, ghsa-fw7p-63qq-7hpr applied in versions: 1.13.2-r0, 1.14.0-r0, 1.14.0-r1, 1.14.1-r0

Multiple security vulnerabilities affect the grafana-alloy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DQ17669 Security fixes for CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-32287, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, ghsa-37cx-329c-33x3, ghsa-6g7g-w4f8-9c9x, ghsa-fw7p-63qq-7hpr applied in versions: 1.13.2-r0, 1.14.1-r0, 1.14.1-r1

Multiple security vulnerabilities affect the grafana-alloy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PW57640 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-25934, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-4427, ghsa-37cx-329c-33x3, ghsa-6g7g-w4f8-9c9x, ghsa-9h8m-3fm2-qjrq, ghsa-9mj6-hxhv-w67j, ghsa-cfpf-hrx2-8rv6, ghsa-f6x5-jh6r-wrfv, ghsa-fw7p-63qq-7hpr, ghsa-j5w8-q4qc-rx2x, ghsa-jqcq-xjh3-6g23, ghsa-p77j-4mvh-x3m3, ghsa-q9hv-hpm4-hj6x, ghsa-x6gf-mpr2-68h6 applied in versions: 1.12.1-r0, 1.12.1-r1, 1.12.1-r2

Multiple security vulnerabilities affect the grafana-alloy-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: minio, vcluster, tempo, terraform-mcp-server, gitlab-runner, k3s, datadog-agent, terragrunt, maru, ollama, rclone, malcontent, redpanda, weaviate, grafana-alloy, teleport, eksctl, opentelemetry-collector, witness, prometheus, dagger, opentelemetry-collector-contrib,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, crossplane-provider-aws-elasticache, crossplane-provider-aws-kinesis, crossplane-provider-azure-storage, crossplane-provider-aws-iam, tempo, datadog-agent, crossplane-provider-aws-s3, crossplane-provider-aws-kms, aws-otel-collector,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, crossplane-provider-aws-elasticache, crossplane-provider-aws-kinesis, crossplane-provider-azure-storage, crossplane-provider-aws-iam, tempo, datadog-agent, crossplane-provider-aws-s3, crossplane-provider-aws-kms, aws-otel-collector,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-ecs-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-sqs, crossplane-provider-aws-ssm-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-ecs-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-sqs, crossplane-provider-aws-ssm-fips,...

Malicious code in cat-ecommerce-alloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78afabd939f190b79fbfccc3bbc3a75170c57fb5142f9ae07849e36bc48c199a The package cat-ecommerce-alloy was found to contain malicious code...