57 matches found
amazon-cloudwatch-agent-1.300064.0-2.1 on GA media (moderate)
amazon-cloudwatch-agent-1.300064.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10420-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...
Medium: amazon-cloudwatch-agent
Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...
Medium: amazon-cloudwatch-agent
Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...
Low: amazon-cloudwatch-agent
Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update...
Low: amazon-cloudwatch-agent
Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.10.20260216 or dnf update --advisory ALAS2023-2026-1442 --releasever 2023.10.20260216 to update your system. More information ...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: stakater-reloader, guac, crossplane-provider-aws-sns, rancher-system-upgrade-controller, minio-object-browser, authservice, crossplane-provider-aws-cloudformation, db-operator, juicefs, octo-sts, opencost, sealed-secrets, wgcf, flux-notification-controller, kubeflow,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: stakater-reloader, guac, crossplane-provider-aws-sns, rancher-system-upgrade-controller, minio-object-browser, authservice, crossplane-provider-aws-cloudformation, db-operator, juicefs, octo-sts, opencost, sealed-secrets, wgcf, flux-notification-controller, kubeflow,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: stakater-reloader, guac, rancher-system-upgrade-controller, opencost, kbld, nri-memcached, dockerize, helm-docs, aws-signer-notation-plugin, eksctl, kustomize, xcaddy, rabbitmq-cluster-operator, lvm-driver, fixuid, sonobuoy, wazero, yace, kubelet-csr-approver,...
Medium: amazon-cloudwatch-agent
Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...
EUVD-2022-7662
Malicious code in bioql PyPI...
Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)
The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...
Medium: amazon-cloudwatch-agent
Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...
Medium: amazon-cloudwatch-agent
Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...
Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1029)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1029 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags...
Medium: amazon-cloudwatch-agent
Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...
Important: amazon-cloudwatch-agent
Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...
Important: amazon-cloudwatch-agent
Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...
Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2851)
The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300054.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2851 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: guac, opencost, kubernetes-dashboard-auth, terraform-provider-acme, crossplane-provider-azure-managedidentity, dgraph, kbld, crossplane-provider-keycloak, nri-memcached, dockerize, helm-docs, aws-signer-notation-plugin, crossplane-provider-azure-authorization,...
GHSA-G9PC-8G42-G6VQ vulnerabilities
Vulnerabilities for packages: guac, opencost, kubernetes-dashboard-auth, terraform-provider-acme, crossplane-provider-azure-managedidentity, dgraph, kbld, crossplane-provider-keycloak, nri-memcached, dockerize, helm-docs, aws-signer-notation-plugin, crossplane-provider-azure-authorization,...