AZL-99333 CVE-2026-84304 affecting package prometheus-adapter 0.12.0-9

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-98394 CVE-2026-37236 affecting package prometheus-adapter 0.12.0-9

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

CVE-2026-73500 affecting package prometheus-adapter for versions less than 0.12.0-9

CVE-2026-73500 affecting package prometheus-adapter for versions less than 0.12.0-9. A patched version of the package is available...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: buildkitd, prometheus-adapter, caddy, kubernetes-fips, kubevela, rancher-webhook, up, k3s, metrics-server-fips, rancher-webhook-fips, kubernetes, kube-oidc-proxy...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, kubernetes-dns-node-cache, aws-ebs-csi-driver, nodetaint, ip-masq-agent, aws-efs-csi-driver-fips, aws-efs-csi-driver, spark-operator...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, cortex, helm-push, sonobuoy, cass-operator, tigera-operator, gosu, docker-cli, ip-masq-agent, stakater-reloader, smarter-device-manager-fips, wait-for-port, prometheus-statsd-exporter-fips, ctop, influx, scorecard, nsc, flannel-cni-plugin,...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: up, buildkitd, kubernetes, k3s, prometheus-adapter, kubevela, caddy...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: spark-operator, kubernetes-dns-node-cache, prometheus-adapter, nodetaint, ip-masq-agent, aws-efs-csi-driver...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: harbor-registry, dbmate, manifest-tool, nri-elasticsearch, kubeflow, osv-scanner, flyte, k3s, polaris, prometheus-adapter, speedtest-go, kserve, k9s, nri-haproxy, nri-consul, nri-kubernetes, pinact, ingress-nginx-controller, prometheus, src, pulumi-language-java,...

CLEANSTART-2026-MN93701 Security fixes in prometheus-adapter 0.12.0-r1

Package prometheus-adapter version 0.12.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

AZL-95946 CVE-2026-73500 affecting package prometheus-adapter for versions less than 0.12.0-9

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

AZL-93279 CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: harbor-registry, tfsec, keda, terraform-provider-azapi, speedtest-go, x509-certificate-exporter, nri-haproxy, kubelet-csr-approver, crossplane-provider-aws-ec2, cue, teleport, cortex, hcloud, undock, kubernetes-replicator, aws-s3-controller, spicedb-operator,...

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...