GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, docker-machine-driver-harvester, go-discover, external-dns, tekton-pipelines, crossplane-provider-azure-managedidentity, osv-scanner, crossplane-provider-aws-s3, crossplane-provider-aws-elasticache, src, kserve-modelmesh-serving,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3248 (ALAS-2026-3248)

"The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3248 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: beats-fips, gke-gcloud-auth-plugin, knative-storage-migrate, litmus-chaos-operator, neuvector-dbgen-fips, prometheus-beat-exporter, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, crossplane-provider-aws-elbv2, crossplane-provider-aws-wafv2, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-ssm-fips, crossplane-provider-aws-kinesis-fips,...

amazon-cloudwatch-agent-1.300064.0-2.1 on GA media (moderate)

amazon-cloudwatch-agent-1.300064.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10420-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

OPENSUSE-SU-2026:10420-1 amazon-cloudwatch-agent-1.300064.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300064.0-2.1 package on the GA media of openSUSE Tumbleweed...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: beats-fips, restic-fips, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips, grpcurl-fips, ingress-nginx-controller-fips, argo-rollouts-fips, cerbos-fips, external-secrets-operator-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: beats-fips, neuvector-dbgen-fips, prometheus-beat-exporter, restic-fips, kyverno-policy-reporter-ui, kubernetes-event-exporter-fips, prometheus-postgres-exporter, crossplane-provider-aws-dynamodb-fips, grpcurl-fips, ingress-nginx-controller-fips, argo-rollouts-fips,...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.10.20260216 or dnf update --advisory ALAS2023-2026-1442 --releasever 2023.10.20260216 to update your system. More information ...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: kuberlr, kubo, tofu-controller, sftpgo-plugin-pubsub, yace, external-dns, lvm-driver, chisel, ksops, osv-scanner, vale, flux-kustomize-controller, crossplane-provider-aws-s3, scorecard, blobfuse2, gke-gcloud-auth-plugin, kubernetes-replicator, rancher-telemetry,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: ctop, kuberlr, kubo, tofu-controller, sftpgo-plugin-pubsub, yace, external-dns, lvm-driver, chisel, ksops, osv-scanner, vale, flux-kustomize-controller, crossplane-provider-aws-s3, scorecard, blobfuse2, gke-gcloud-auth-plugin, kubernetes-replicator, rancher-telemetry...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: yace, chisel, osv-scanner, flux-kustomize-controller, scorecard, timescaledb-tune, ytt, crossplane-provider-sql, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, lazygit, aws-flb-cloudwatch, azure-ipam, nri-f5, slsa-verifier, ip-masq-agent, go-licenses,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: ctop, kuberlr, kubo, tofu-controller, sftpgo-plugin-pubsub, yace, external-dns, lvm-driver, chisel, ksops, osv-scanner, vale, flux-kustomize-controller, crossplane-provider-aws-s3, scorecard, blobfuse2, gke-gcloud-auth-plugin, kubernetes-replicator, rancher-telemetry...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

EUVD-2022-7662

Malicious code in bioql PyPI...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...