avalanche-config-installer (>=0.2.36 <=0.2.43), avalanche-installer (>=0.0.18 <=0.0.32) +38 more potentially affected by unknown CVE via aws-sdk-s3 (>=0.0.26-alpha <=0.9.0)

aws-sdk-s3 CARGO version =0.0.26-alpha, =0.2.36, =0.0.18, =0.0.42, =0.0.5, =0.0.24, =0.0.1, =0.0.0, =0.0.46, =0.1.7, =0.4.0, =0.4.0, =0.1.1, =0.1.0, =0.8.0, =0.8.0, =0.12.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

aws-manager (>=0.0.1 <=0.21.2), aws-sdk-manager (>=0.0.0 <=0.0.10) +2 more potentially affected by unknown CVE via aws-sdk-cloudwatch (>=0.11.0 <=0.6.0)

aws-sdk-cloudwatch CARGO version =0.11.0, =0.0.1, =0.0.0, =0.1.3, =1.0.0, =2.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3120 (ALAS-2025-3120)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300062.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3120 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which m...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: src-fingerprint, go-discover, kpt, docker-credential-gcr, aws-flb-firehose, gostatsd, terraform-provider-google, smokescreen, aws-flb-cloudwatch, aws-flb-kinesis, kubeflow, neuvector-dbgen, newrelic-nri-statsd, hello-world-golang, sonobuoy, php-fpmexporter,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: src-fingerprint, go-discover, kpt, docker-credential-gcr, aws-flb-firehose, gostatsd, terraform-provider-google, smokescreen, aws-flb-cloudwatch, aws-flb-kinesis, kubeflow, neuvector-dbgen, newrelic-nri-statsd, hello-world-golang, sonobuoy, php-fpmexporter,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, kubeflow, stakater-reloader, src-fingerprint-fips, docker-credential-gcr, sonobuoy-fips, gostatsd, sonobuoy, falcoctl-fips, terraform-provider-google-fips, kubeflow-fips, prometheus-beat-exporter-fips, kubernetes-event-exporter-fips,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, kubeflow, stakater-reloader, src-fingerprint-fips, docker-credential-gcr, sonobuoy-fips, gostatsd, sonobuoy, falcoctl-fips, terraform-provider-google-fips, kubeflow-fips, prometheus-beat-exporter-fips, kubernetes-event-exporter-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: terraform-mcp-server, ko, k8s-device-plugin, hubble-ui, gke-gcloud-auth-plugin, boring-registry, rancher-webhook, nri-f5, sftpgo, spiffe-helper, timestamp-authority, nats, rancher-machine, aws-nuke, scorecard, rabbitmq-default-user-credential-updater, mods,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3037 (ALAS-2025-3037)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300059.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3037 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted the preceding description block directly from the tested product...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Co...

EUVD-2024-45843

Malicious code in bioql PyPI...

EUVD-2022-4475

Malicious code in bioql PyPI...

EUVD-2022-7662

Malicious code in bioql PyPI...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: sonarqube, tez, druid, trino, zookeeper, selenium, apicurio-registry, cloudwatch-exporter, strimzi-kafka-operator, zipkin, logstash-input-beats, apache-nifi, keycloak, flyway, wavefront-proxy, apache-activemq-artemis, solr, docker-selenium, logstash-input-http,...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, tez, camunda-zeebe, elasticsearch, zookeeper-fips, opensearch, apicurio-registry, cassandra-reaper, management-api-for-apache-cassandra-5.0, localstack, logstash-input-http, apache-hop, trino, celeborn, logstash-input-beats, zipkin, neo4j,...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, tez, camunda-zeebe, elasticsearch, zookeeper-fips, opensearch, apicurio-registry, cassandra-reaper, management-api-for-apache-cassandra-5.0, localstack, logstash-input-http, apache-hop, trino, celeborn, logstash-input-beats, zipkin, neo4j,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: rekor, harbor-cli, bento, spiffe-helper, kubeflow-katib, trivy-fips, elvish, aws-iam-authenticator-fips, otel-cli, packer, argo-cd-fips, k6-fips, trust-manager-fips, helm-mapkubeapis, kubernetes-dns-node-cache-fips, sbom-convert, fulcio-fips,...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2025-2904)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300055.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2904 advisory. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus...