Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3120 (ALAS-2025-3120)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300062.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3120 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which m...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: neuvector-dbgen, src-fingerprint, php-fpmexporter, docker-credential-gcr, gostatsd, hello-world-golang, aws-flb-kinesis, kubeflow, newrelic-nri-statsd, smokescreen, sonobuoy, terraform-provider-google, kube-fluentd-operator, go-discover, kpt, aws-flb-firehose,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: neuvector-dbgen, src-fingerprint, php-fpmexporter, docker-credential-gcr, gostatsd, hello-world-golang, aws-flb-kinesis, kubeflow, newrelic-nri-statsd, smokescreen, sonobuoy, terraform-provider-google, kube-fluentd-operator, go-discover, kpt, aws-flb-firehose,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, newrelic-nri-statsd, aws-flb-firehose-fips, aws-flb-cloudwatch-fips, src-fingerprint-fips, gostatsd, prometheus-mongodb-exporter-fips, smokescreen, src-fingerprint, prometheus-beat-exporter, terraform-provider-google, neuvector-dbgen-fips,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, newrelic-nri-statsd, aws-flb-firehose-fips, aws-flb-cloudwatch-fips, src-fingerprint-fips, gostatsd, prometheus-mongodb-exporter-fips, smokescreen, src-fingerprint, prometheus-beat-exporter, terraform-provider-google, neuvector-dbgen-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, spire-controller-manager, scorecard, kube-vip-cloud-provider, hubble, grpcurl, hugo, spegel, gitness, db-operator, kube-logging-operator-custom-runner, terraform-provider-tls, falco-exporter, dask-gateway, protoc-gen-go-grpc,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3037 (ALAS-2025-3037)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300059.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3037 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted the preceding description block directly from the tested product...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Co...

EUVD-2024-45843

Malicious code in bioql PyPI...

EUVD-2022-7662

Malicious code in bioql PyPI...

EUVD-2022-4475

Malicious code in bioql PyPI...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, sonarqube, cassandra-reaper, selenium, opensearch, akhq, docker-selenium, apicurio-registry, solr, flyway, thingsboard, trino, celeborn, apache-activemq-artemis, cloudwatch-exporter, spark, apache-nifi,...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: opensearch, solr, management-api-for-apache-cassandra-5.0, seata, zipkin, selenium, cassandra-reaper, keycloak, spark-fips, wildfly, camunda-zeebe, kafka, akhq, kserve-modelmesh, apache-hop, apache-hop-fips, thingsboard, zookeeper, druid, hadoop-fips, sonarqube,...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: opensearch, solr, management-api-for-apache-cassandra-5.0, seata, zipkin, selenium, cassandra-reaper, keycloak, spark-fips, wildfly, camunda-zeebe, kafka, akhq, kserve-modelmesh, apache-hop, apache-hop-fips, thingsboard, zookeeper, druid, hadoop-fips, sonarqube,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: stakater-reloader-fips, aws-otel-collector-fips, rancher-loglevel, logstash-exporter, kubevela-fips, splunk-otel-collector-fips, azuredisk-csi-fips, cephcsi-fips, cluster-api-azure-controller, fuse-overlayfs-snapshotter, sigstore-scaffolding, trillian-fips, chainctl,...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Medium: amazon-cloudwatch-agent

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...