GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, promxy, vault, promxy-fips, pulumi, prometheus, amazon-cloudwatch-agent-operator-fips...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: k8sgpt, aws-otel-collector, node-problem-detector, jaeger, mc, keda, prometheus-pushgateway, prometheus, loki, istio, prometheus-operator, cloud-sql-proxy, tempo, grafana, datadog-agent, minio-operator, trillian, minio, karma, certificate-transparency, metrics-server...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubeflow-pipelines, splunk-otel-collector, grafana-alloy, kargo, opentelemetry-collector-contrib, amazon-cloudwatch-agent, opentelemetry-collector, argo-workflows, argo-rollouts, nats...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, grafana-alloy, argo-events, sqlexporter, opentelemetry-collector-contrib, amazon-cloudwatch-agent, jitsucom-bulker, splunk-otel-collector, bento...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: promxy, rancher-agent, kubevela, k3s, pulumi, amazon-cloudwatch-agent-operator...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, pulumi, amazon-cloudwatch-agent-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, render-template, helm-set-status, cilium-cli, envconsul, witness, thanos-operator, lazydocker, eksctl, caddy, oauth2-proxy, ratify, hubble, nri-rabbitmq, nri-memcached, cloud-sql-proxy, guac, kor, steampipe, rclone, aactl,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85983

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-19363 lmammino oidc-authorizer Lambda Authorizer handler.rs log file

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda Authorizer. The manipulation results in sensitive information in log files. The attack can be executed remotely. src/handler.rs logs raw...

CVE-2026-19363: Insertion of Sensitive Information into Log File

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda Authorizer. The manipulation results in sensitive information in log files. The attack can be executed remotely. src/handler.rs logs raw...

PT-2026-69305

Name of the Vulnerable Software and Affected Versions lmammino oidc-authorizer versions prior to 0.4.1 Description The Lambda Authorizer component contains an issue where raw Authorization header values and complete bearer tokens or JWTs are logged on authentication failure paths, potentially...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

CLEANSTART-2026-ZO12938 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r1

Package amazon-cloudwatch-agent-fips version 1.300066.1-r1 fixes 20 vulnerabilities: CVE-2026-39824, CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-XG16729 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r0

Package amazon-cloudwatch-agent-fips version 1.300066.1-r0 fixes 2 vulnerabilities: CVE-2026-41602, ghsa-wf45-q9ch-q8gh...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...