EUVD-2026-91803

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

prometheus-postgres_exporter-0.10.1-6.1 on GA media (moderate)

prometheus-postgresexporter-0.10.1-6.1 on GA media Announcement ID: openSUSE-SU-2026:10644-1 Rating: moderate Cross-References: CVE-2022-21698 CVSS scores: CVE-2022-21698 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one...