CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, temporal-server, crossplane-provider-aws-sns, tetragon, terraform-provider-azapi, kbld, pluto, dapr, ko, nri-kubernetes, nfpm, crossplane-provider-aws-cloudwatchlogs, neuvector-dbgen, fluxcd-kustomize-mutating-webhook,...

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19. A patched version of the package is available...

AZL-77073 CVE-2025-58190 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76983 CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77070 CVE-2025-47911 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: k9s, sftpgo-plugin-pubsub, metrics-agent, temporal-server, kube-rbac-proxy, terraform-provider-time, pluto, frp, ko, rancher-helm, nats-server, nfpm, nri-kafka, terraform-provider-azuread, kube-metrics-adapter, mesosphere-vsphere-csi, portieris, mockery,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: k9s, sftpgo-plugin-pubsub, metrics-agent, temporal-server, kube-rbac-proxy, terraform-provider-time, pluto, frp, ko, rancher-helm, nats-server, nfpm, nri-kafka, terraform-provider-azuread, kube-metrics-adapter, mesosphere-vsphere-csi, portieris, mockery,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: vault-env, kubernetes-replicator, cluster-proportional-autoscaler-fips, rootlesskit, karpenter-fips, kubelet-csr-approver, vgpu-util, stern, kuberay-operator-fips, tofu-controller, azurefile-csi-fips, dragonfly-operator, livekit-egress, cri-tools, fulcio-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vault-env, kubernetes-replicator, cluster-proportional-autoscaler-fips, rootlesskit, karpenter-fips, kubelet-csr-approver, vgpu-util, stern, kuberay-operator-fips, tofu-controller, azurefile-csi-fips, dragonfly-operator, livekit-egress, cri-tools, fulcio-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: vault-env, kubernetes-replicator, cluster-proportional-autoscaler-fips, rootlesskit, karpenter-fips, kubelet-csr-approver, vgpu-util, stern, kuberay-operator-fips, tofu-controller, azurefile-csi-fips, dragonfly-operator, livekit-egress, cri-tools, fulcio-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: vault-env, kubernetes-replicator, cluster-proportional-autoscaler-fips, rootlesskit, karpenter-fips, kubelet-csr-approver, vgpu-util, stern, kuberay-operator-fips, tofu-controller, azurefile-csi-fips, dragonfly-operator, livekit-egress, cri-tools, fulcio-fips,...