CLEANSTART-2026-RX97622 Security fixes in dcgm-exporter 4.5.1-r0

Package dcgm-exporter version 4.5.1-r0 fixes 7 vulnerabilities: CVE-2026-27139, CVE-2025-61732, CVE-2025-68121, CVE-2026-27142, CVE-2026-25679...

CLEANSTART-2026-OK10530 Security fixes in druid-exporter-fips 0.11-r4

Package druid-exporter-fips version 0.11-r4 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-HY96164 Security fixes in kubernetes-event-exporter-fips 1.7-r0

Package kubernetes-event-exporter-fips version 1.7-r0 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...

CLEANSTART-2026-BS98761 Security fixes in prometheus-mysqld-exporter 0.15.0-r1

Package prometheus-mysqld-exporter version 0.15.0-r1 fixes 20 vulnerabilities: CVE-2026-39820, CVE-2026-27143, CVE-2026-42499, CVE-2026-39836, CVE-2026-32281...

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2: Use proper obs time form...

SUSE-SU-2026:3416-1 Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: - Release 1.4.2: Use proper obs time...

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5. A patched version of the package is available...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: telegraf, nerdctl, snyk-cli, kine, cilium, spire-server, prometheus-operator, minio, kots, terraform, omnictl-multiarch, loki, containerd, commercial-expanso-edge, flux, kyverno, k3d, omnictl-multiarch-fips, prometheus, kaf, k3s, prometheus-mongodb-exporter,...

CVE-2026-47483

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

CVE-2026-47483

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

EUVD-2026-49884

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

CVE-2026-47483

NVIDIA DCGM Exporter (all platforms) has a vulnerability in the /debug/pprof endpoints that allows an attacker to cause uncontrolled resource consumption by issuing concurrent unauthenticated profiling requests. This can lead to denial of service and information disclosure. The CVSS 3.1 base metr...

CVE-2026-47483

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

Security Bulletin: NVIDIA DCGM Exporter - July 2026

NVIDIA has released a software update for NVIDIA® DCGM Exporter. To protect your system, clone or update this software from the NVIDIA/dcgm-exporter GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses...

PT-2026-65505

NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service an...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: logstash, zipkin, apache-activemq-artemis, celeborn, apicurio-registry, infinispan, druid, management-api-for-apache-cassandra-5.0, neo4j, cloudwatch-exporter, strimzi-kafka-operator, opensearch, akhq, wavefront-proxy, flyway, kserve-modelmesh, thingsboard, tez,...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: logstash, zipkin, apache-activemq-artemis, celeborn, apicurio-registry, infinispan, druid, management-api-for-apache-cassandra-5.0, neo4j, cloudwatch-exporter, strimzi-kafka-operator, opensearch, akhq, wavefront-proxy, flyway, kserve-modelmesh, thingsboard, tez,...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: logstash, zipkin, apache-activemq-artemis, celeborn, apicurio-registry, infinispan, druid, management-api-for-apache-cassandra-5.0, neo4j, cloudwatch-exporter, strimzi-kafka-operator, opensearch, akhq, wavefront-proxy, flyway, kserve-modelmesh, thingsboard, tez,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: logstash, zipkin, apache-activemq-artemis, celeborn, apicurio-registry, infinispan, druid, management-api-for-apache-cassandra-5.0, neo4j, cloudwatch-exporter, strimzi-kafka-operator, opensearch, akhq, wavefront-proxy, flyway, kserve-modelmesh, thingsboard, tez,...