GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: goreleaser, gatekeeper, kube-logging-operator, rancher-system-upgrade-controller, kapp, cert-manager-cmctl, kube-bench, redka, local-path-provisioner, grafana-rollout-operator, keda, telegraf, crossplane-provider-aws-cloudformation, sriov-network-device-plugin, wuzz,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: goreleaser, gatekeeper, rancher-system-upgrade-controller, kapp, cert-manager-cmctl, kube-bench, redka, local-path-provisioner, grafana-rollout-operator, keda, telegraf, crossplane-provider-aws-cloudformation, sriov-network-device-plugin, wuzz, scorecard,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-system-upgrade-controller, telegraf, scorecard, kubelet-csr-approver, harbor-registry, terraform-mcp-server, timoni, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, opensearch-k8s-operator, crossplane-provider-aws-kinesis,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: goreleaser, gatekeeper, rancher-system-upgrade-controller, kapp, cert-manager-cmctl, kube-bench, redka, local-path-provisioner, grafana-rollout-operator, keda, telegraf, crossplane-provider-aws-cloudformation, sriov-network-device-plugin, wuzz, scorecard,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-system-upgrade-controller, telegraf, scorecard, kubelet-csr-approver, harbor-registry, terraform-mcp-server, timoni, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, opensearch-k8s-operator, crossplane-provider-aws-kinesis,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-system-upgrade-controller, telegraf, scorecard, kubelet-csr-approver, harbor-registry, terraform-mcp-server, timoni, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, opensearch-k8s-operator, crossplane-provider-aws-kinesis,...

CVE-2022-23511

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3120 (ALAS-2025-3120)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300062.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3120 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which m...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted the preceding description block directly from the tested product...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3037 (ALAS-2025-3037)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300059.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3037 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Co...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

EUVD-2022-7662

Malicious code in bioql PyPI...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1029)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1029 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2851)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300054.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2851 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size...

Important: amazon-cloudwatch-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...