CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2

CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2. A patched version of the package is available...

CVE-2023-48795 affecting package node-problem-detector for versions less than 0.8.20-2

CVE-2023-48795 affecting package node-problem-detector for versions less than 0.8.20-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16. A patched version of the package is available...

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6. A patched version of the package is available...

AZL-57323 CVE-2025-22869 affecting package node-problem-detector for versions less than 0.8.20-2

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57315 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57410 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, secrets-store-csi-driver-provider-azure, newrelic-infrastructure-agent, dive, rabbitmq-cluster-operator, configmap-reload, src-fingerprint, hello-world-golang, newrelic-infra-operator, temporal, pulumi,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, secrets-store-csi-driver-provider-azure, newrelic-infrastructure-agent, dive, rabbitmq-cluster-operator, configmap-reload, src-fingerprint, hello-world-golang, newrelic-infra-operator, temporal, pulumi,...

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4. A patched version of the package is available...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CVE-2024-45338 affecting package node-problem-detector for versions less than 0.8.15-3

CVE-2024-45338 affecting package node-problem-detector for versions less than 0.8.15-3. A patched version of the package is available...

AZL-54410 CVE-2024-45338 affecting package node-problem-detector for versions less than 0.8.15-3

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2. A patched version of the package is available...

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3. A patched version of the package is available...

CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / cf-cli (CVE-2024-24786)

The version of azcopy / blobfuse2 / cert-manager / cf-cli installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24786 advisory. - The protojson.Unmarshal function can enter an infinite loop when...

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2. A patched version of the package is available...

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2. An upgraded version of the package is available that resolves this issue...

AZL-38575 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-39505 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...