GO-2026-5264 vulnerabilities

Vulnerabilities for packages: mc, jaeger, tempo, k8sgpt, karma, datadog-agent, aws-otel-collector, node-problem-detector, certificate-transparency, metrics-server, splunk-otel-collector, trillian, opentelemetry-collector, amazon-cloudwatch-agent-operator, grafana, prometheus, istio, loki,...

CLEANSTART-2026-BX42425 Security fixes in node-problem-detector 0.8.19-r1

Package node-problem-detector version 0.8.19-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CLEANSTART-2026-UF04910 Security fixes in node-problem-detector 0.8.19-r2

Package node-problem-detector version 0.8.19-r2 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27137, CVE-2026-27138...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: mc, jaeger, tempo, minio-object-browser, k8sgpt, telegraf, opentelemetry-collector-contrib, karma, datadog-agent, aws-otel-collector, opentelemetry-operator, node-problem-detector, certificate-transparency, metrics-server, splunk-otel-collector, trillian,...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: mc, jaeger, tempo, minio-object-browser, telegraf, karma, datadog-agent, aws-otel-collector, splunk-otel-collector, trillian, istio, loki, cloud-sql-proxy, minio-operator, keda, grafana-pyroscope, prometheus-pushgateway, mcp-grafana, minio, certificate-transparency...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: mc, jaeger, tempo, minio-object-browser, telegraf, karma, datadog-agent, aws-otel-collector, splunk-otel-collector, trillian, istio, loki, cloud-sql-proxy, minio-operator, keda, grafana-pyroscope, prometheus-pushgateway, mcp-grafana, minio, certificate-transparency...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kots, wave, cloud-provider-azure, harbor, bom, ingress-nginx-controller, prometheus-operator, mc, net-kourier, litestream, aws-efs-csi-driver, crossplane-provider-family-azure, neuvector-scanner, rancher-helm, spiffe-helper, x509-certificate-exporter, filebrowser,...

CLEANSTART-2026-KR58137 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, ghsa-6v2p-p543-phr9 applied in versions: 0.8.19-r0, 0.8.19-r1, 0.8.19-r2

Multiple security vulnerabilities affect the node-problem-detector package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2. A patched version of the package is available...

CVE-2023-48795 affecting package node-problem-detector for versions less than 0.8.20-2

CVE-2023-48795 affecting package node-problem-detector for versions less than 0.8.20-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2

CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2. A patched version of the package is available...

CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16. A patched version of the package is available...

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6. A patched version of the package is available...

AZL-57323 CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57315 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57410 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, aws-efs-csi-driver, nri-f5, pulumi, kind, k8sgpt-operator, metallb, nri-mongodb, dataplaneapi, cass-operator, pulumi-language-yaml, secrets-store-csi-driver-provider-gcp, tailscale, dynamic-localpv-provisioner, nri-apache,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, aws-efs-csi-driver, nri-f5, pulumi, kind, k8sgpt-operator, metallb, nri-mongodb, dataplaneapi, cass-operator, pulumi-language-yaml, secrets-store-csi-driver-provider-gcp, tailscale, dynamic-localpv-provisioner, nri-apache,...

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4. A patched version of the package is available...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...