GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, promxy, pulumi...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: kubevela, rancher-agent, promxy, k3s, pulumi, amazon-cloudwatch-agent-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, gobuster, gobump, docker-cli, helm-operator, guac, harbor-registry, steampipe, nri-rabbitmq, k3d, kube-logging-operator, controller-gen, polaris, dgraph, gptscript, gcsfuse, aws-application-networking-k8s, emissary, buildkitd,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85983

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, victoriametrics-operator, ld-relay-fips, metrics-server, rancher-webhook-fips, cert-manager-cmctl, chaos-mesh-fips, crossplane-provider-aws-sns-fips, neuvector, newrelic-k8s-metrics-adapter, policy-controller, ory-kratos, cerbos,...

Important: amazon-cloudwatch-agent

Issue Overview: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler cmd/compile. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption in programs compiled with...

CLEANSTART-2026-GA28186 Security fixes for CVE-2026-41602 applied in versions: 1.300066.1-r0

Security vulnerability affects the amazon-cloudwatch-agent package. This issue is resolved in later releases. See references for vulnerability details...

OPENSUSE-SU-2026:10699-1 amazon-cloudwatch-agent-1.300066.1-1.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-38516

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, istio, crossplane-provider-aws-cloudfront, step-ca, k3d, redpanda, litestream, net-kourier, crossplane-provider-aws-memorydb, emissary, node-problem-detector, crossplane-provider-aws-sns, osv-scanner, crossplane-provider-aws-iam,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3248 (ALAS-2026-3248)

"The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3248 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: longhorn-cli, trivy-operator-fips, victoriametrics-operator, kubernetes-event-exporter, filebrowser, oras-fips, zabbix-agent2, rancher-webhook-fips, wuzz, nri-nginx-fips, cert-manager-cmctl, chaos-mesh-fips, crossplane-provider-aws-sns-fips, logstash-exporter,...

amazon-cloudwatch-agent-1.300064.0-2.1 on GA media (moderate)

amazon-cloudwatch-agent-1.300064.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10420-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.10.20260216 or dnf update --advisory ALAS2023-2026-1442 --releasever 2023.10.20260216 to update your system. More information ...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, kubernetes-csi-external-provisioner, rancher-system-upgrade-controller, cortex, git-lfs, aws-flb-kinesis, ferretdb, gitness, gobuster, kubernetes-event-exporter, newrelic-nri-statsd, fluxcd-kustomize-mutating-webhook, helm-operator, kuma,...