CVE-2026-73500 affecting package prometheus-adapter for versions less than 0.12.0-9

CVE-2026-73500 affecting package prometheus-adapter for versions less than 0.12.0-9. A patched version of the package is available...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: rancher-webhook, kubevela, up, rancher-webhook-fips, kube-oidc-proxy, caddy, prometheus-adapter, k3s, buildkitd, kubernetes, metrics-server-fips, kubernetes-fips...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, spark-operator, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver, ip-masq-agent, nodetaint, aws-efs-csi-driver-fips...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, gobuster, go-bindata, nsc, sonobuoy, bank-vaults-fips, metrics-server, aws-flb-kinesis, go-md2man, ctop, kubeflow-katib, local-path-provisioner, prometheus-stackdriver-exporter, configmap-reload, flannel-cni-plugin, kind,...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, kubernetes, buildkitd, caddy, k3s, up, kubevela...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, prometheus-adapter, nodetaint, spark-operator, kubernetes-dns-node-cache, ip-masq-agent...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cluster-api, nfs-subdir-external-provisioner, nri-prometheus, kubernetes, kube-vip, prometheus, nova, docker-cli-buildx, kubeflow-katib, terragrunt, harbor, knative-serving, nri-kubernetes, kiali, victoriametrics-cluster, kube-bench, telegraf, cilium, chisel, polaris...

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: prometheus, nova, crossplane-provider-keycloak, local-static-provisioner, harbor, k8sgateway, knative-operator, kiali, chisel, azurefile-csi, kubernetes-csi-node-driver-registrar, tetragon, kubernetes-dns-node-cache, argocd-image-updater, doppler-kubernetes-operator,...

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19. A patched version of the package is available...

AZL-77073 CVE-2025-58190 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76983 CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...