GO-2024-2978 vulnerabilities

Vulnerabilities for packages: tflint, kargo, k8sgpt-operator, opa, smarter-device-manager, opentelemetry-collector, grafana-mimir, step-ca, hubble-ui, kots, cloudnative-pg, ferretdb, conftest, kube-rbac-proxy, terragrunt, rqlite, dex, dbmate, guac, k3s, pulumi-language-dotnet, minio, trivy, zarf,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: up, rclone, argo-workflows, opentelemetry-collector, grafana-mimir, flux-image-reflector-controller, secrets-store-csi-driver-provider-azure, sqlpad, step-ca, tekton-chains, goreleaser, policy-controller, druid, thanos, flyte, nuclei, terragrunt, cosign, falcoctl,...

CLEANSTART-2026-HN48536 Security fixes in grafana-agent-operator 0.44.3-r1

Package grafana-agent-operator version 0.44.3-r1 fixes 6 vulnerabilities: CVE-2026-39828, ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv, ghsa-x527-x647-q7gg...

CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, crossplane-provider-azure-powerbidedicated, litestream, k8ssandra-client, crossplane-provider-aws-elbv2, crossplane-provider-aws-firehose-fips, crossplane-provider-azure-orbital, crossplane-provider-aws-cognitoidentity,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, aws-node-termination-handler, kine, tofu-controller, k8ssandra-operator, libnvidia-container, hubble-ui, sftpgo-plugin-pubsub, terraform-provider-tls, goreleaser, scorecard, spqr, terraform, secrets-store-csi-driver, rancher-agent, dex,...

CVE-2021-41090

Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observability stack. Prior to versions 0.20.1 and 0.21.2, inline secrets defined within a metrics instance config are exposed in plaintext over two endpoints: metrics instance configs defin...

EUVD-2021-2493

Malware in sbrugna...

EUVD-2024-2829

Malicious code in bioql PyPI...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: policy-controller-fips, litestream, mc, ksops, docker-compose, harbor-scanner-trivy-fips, falcosidekick, helm-operator-fips, harbor-cli, kubernetes-csi-driver-hostpath, secrets-store-csi-driver-provider-azure, atlantis, prometheus-adapter-fips, direnv,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: kapp-controller, azcopy, terraform-provider-azurerm, cloudprober, crossplane-provider-aws-elasticache, crossplane-provider-aws-kms, kine, crossplane-provider-aws-sns, sftpgo-plugin-pubsub, terraform-provider-tls, newrelic-nri-statsd, amass, goreleaser, scorecard, src...

SUSE CVE-2024-8996

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

GO-2024-3170 Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability in github.com/grafana/agent

Grafana Agent Flow mode on Windows has Unquoted Search Path or Element vulnerability in github.com/grafana/agent...

Grafana Agent Data Visualization Quotation Issue

The vulnerability of the Grafana Agent visualization system is related to the absence of quotation marks in the writing of elements or search paths. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2024-8996

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

CVE-2024-8996

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

CVE-2024-8996 Grafana Agent Flow on Windows Unquoted service path

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

CVE-2024-8996

Grafana Agent (Flow mode) on Windows is affected by CVE-2024-8996 (Unquoted Search Path or Element), allowing Privilege Escalation from Local User to SYSTEM. Affected versions: Agent Flow prior to 0.43.2. The issue is addressed in Grafana Agent v0.43.3 (and related security release). Exploitation...

CVE-2024-8996: Unquoted Search Path or Element

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

Grafana Agent security vulnerabilities

Grafana Agent is an OpenTry Collector distribution of Grafana open source. A security vulnerability exists in Grafana Agent versions prior to 0.43.2 that stems from an unquoted search path or element vulnerability that allows elevation of privilege...