Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1029)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1029 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Important: amazon-cloudwatch-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-cloudwatch-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2851)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300054.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2851 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kube-bench, nri-kafka, haproxy-ingress, nri-haproxy, caddy, crossplane-provider-keycloak, jaeger-operator, newrelic-infra-operator, fscrypt, aws-flb-firehose, tailscale, nri-apache, sealed-secrets, pulumi-kubernetes-operator, kubernetes-dashboard-metrics-scraper,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kube-bench, nri-kafka, haproxy-ingress, nri-haproxy, caddy, crossplane-provider-keycloak, jaeger-operator, newrelic-infra-operator, fscrypt, aws-flb-firehose, tailscale, nri-apache, sealed-secrets, pulumi-kubernetes-operator, kubernetes-dashboard-metrics-scraper,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy-fips, xcaddy, azcopy-fips, extism, sqlexporter-fips, agentbeat, haproxy-ingress, crossplane-provider-sql, terraform-provider-pagerduty, prometheus-mysqld-exporter-fips, falco-exporter-fips, mattmoor-chainit, vault-secrets-operator, rancher-webhook,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy-fips, xcaddy, azcopy-fips, extism, sqlexporter-fips, agentbeat, haproxy-ingress, crossplane-provider-sql, terraform-provider-pagerduty, prometheus-mysqld-exporter-fips, falco-exporter-fips, mattmoor-chainit, vault-secrets-operator, rancher-webhook,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: gitsign, azcopy, eksctl, flux-source-controller, weaviate, glab, grafana-alloy, gitea, flux-notification-controller, actions-runner-controller, velero, crossplane-provider-azure-storage, buildkitd, crossplane-provider-azure-authorization,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: nemo, timestamp-authority-fips, weaviate, external-secrets-fips, pulumi-kubernetes-operator, azcopy-fips, rekor, hydra, sqlexporter-fips, nuclei, crossplane-provider-family-azure, sqlexporter, tekton-chains-fips, opentelemetry-operator, falcoctl, argo-cd,...

Important: amazon-cloudwatch-agent

Issue Overview: Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability CVE-2024-35255 The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows...

GO-2022-1160 Amazon CloudWatch Agent for Windows has Privilege Escalation Vector in github.com/aws/amazon-cloudwatch-agent

Amazon CloudWatch Agent for Windows has Privilege Escalation Vector in github.com/aws/amazon-cloudwatch-agent...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2024-2550)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300039.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2550 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an...

Medium: amazon-cloudwatch-agent

Issue Overview: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed...

Medium: amazon-cloudwatch-agent

Issue Overview: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed...

Medium: amazon-cloudwatch-agent

Issue Overview: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed...

Amazon CloudWatch Agent Installed (Unix)

Binary data amazoncloudwatchagentnixinstalled.nbin...

Amazon CloudWatch Agent < 1.247355 (GHSA-j8x2-2m5w-j939)

The version of Amazon CloudWatch Agent installed on the remote host is prior to 1.247355. It is, therefore, affected by a vulnerability as referenced in the GHSA-j8x2-2m5w-j939 advisory. - A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting...