GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: age, git-lfs, gitness, mkcert, harbor-registry, s5cmd, sonobuoy, hydra, traefik, authservice, gptscript, osv-scanner, crossplane-provider-aws-iam, mattermost, redka, cluster-api-gcp-controller, neuvector-sigstore-interface, descheduler, vault-benchmark, sealed-secret...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, kubernetes-csi-external-provisioner, rancher-system-upgrade-controller, cortex, git-lfs, aws-flb-kinesis, ferretdb, gitness, gobuster, kubernetes-event-exporter, newrelic-nri-statsd, fluxcd-kustomize-mutating-webhook, helm-operator, kuma, ctop...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

EUVD-2022-7662

Malicious code in bioql PyPI...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1029)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1029 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Important: amazon-cloudwatch-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-cloudwatch-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2851)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300054.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2851 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: age, grafana-mimir, git-lfs, gitness, karma, mkcert, harbor-registry, go-bindata, s5cmd, envoy-gateway, sonobuoy, authservice, gptscript, emissary, buildkitd, nri-elasticsearch, tflint, redka, crossplane-provider-azure-managedidentity, fq, temporal-server,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: age, grafana-mimir, git-lfs, gitness, karma, mkcert, harbor-registry, go-bindata, s5cmd, envoy-gateway, sonobuoy, authservice, gptscript, emissary, buildkitd, nri-elasticsearch, tflint, redka, crossplane-provider-azure-managedidentity, fq, temporal-server,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, filebrowser, metrics-server, nri-memcached, wuzz, cert-manager-cmctl, opentelemetry-collector, policy-controller, go-licenses, ini-file, promxy, velero-plugin-for-microsoft-azure,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: grafana-mimir, cortex, gitness, kaniko, guac, harbor-registry, sftpgo-plugin-pubsub, crossplane-provider-azure, hydra, traefik, step-ca, chezmoi, amazon-cloudwatch-agent, pulumi, dgraph, atlantis, gitsign, ksops, gitea, argo-workflows, azcopy, zarf, buildkitd,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, mc-fips, falcosidekick-fips, kubernetes, minio-operator-fips, rancher, velero-plugin-for-microsoft-azure-fips, filebrowser, ko-fips, flux, restic, argo-rollouts-fips, git-sync-fips, neuvector, opencost-fips, opentelemetry-collector,...

Important: amazon-cloudwatch-agent

Issue Overview: Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability CVE-2024-35255 The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2024-2550)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300039.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2550 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an...

Medium: amazon-cloudwatch-agent

Issue Overview: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed...