31 matches found
CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5
CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...
AZL-93285 CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4
CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4. A patched version of the package is available...
AZL-88254 CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...
GHSA-3V2C-X6Q9-F697 vulnerabilities
Vulnerabilities for packages: elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, tkn-fips, azcopy-fips, kubernetes, kubo-fips, headlamp-fips, terraform-provider-azapi-fips, beats-fips, spilo, tempo, memcached-exporter-fips, temporal-fips, crossplane-provider-aws-appflow-fips, opencost,...
GHSA-2283-WF8C-RW8R vulnerabilities
Vulnerabilities for packages: elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, tkn-fips, azcopy-fips, kubernetes, kubo-fips, headlamp-fips, terraform-provider-azapi-fips, beats-fips, spilo, tempo, memcached-exporter-fips, temporal-fips, crossplane-provider-aws-appflow-fips, opencost,...
CVE-2026-39823 vulnerabilities
Vulnerabilities for packages: elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, tkn-fips, azcopy-fips, kubernetes, kubo-fips, headlamp-fips, terraform-provider-azapi-fips, beats-fips, spilo, tempo, memcached-exporter-fips, temporal-fips, crossplane-provider-aws-appflow-fips, opencost,...
CVE-2026-39826 vulnerabilities
Vulnerabilities for packages: elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, tkn-fips, azcopy-fips, kubernetes, kubo-fips, headlamp-fips, terraform-provider-azapi-fips, beats-fips, spilo, tempo, memcached-exporter-fips, temporal-fips, crossplane-provider-aws-appflow-fips, opencost,...
CVE-2026-39819 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, nri-mysql-fips, tkn-fips, nfs-subdir-external-provisioner-fips, nri-postgresql-fips, azcopy-fips, kafkaexporter-fips, kubernetes, mods, nri-kafka-fips, kubo-fips, headlamp-fips,...
CVE-2026-42501 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, nri-mysql-fips, tkn-fips, nfs-subdir-external-provisioner-fips, nri-postgresql-fips, azcopy-fips, kafkaexporter-fips, kubernetes, mods, nri-kafka-fips, kubo-fips, headlamp-fips,...
CVE-2026-39817 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, nri-mysql-fips, tkn-fips, nfs-subdir-external-provisioner-fips, nri-postgresql-fips, azcopy-fips, kafkaexporter-fips, kubernetes, mods, nri-kafka-fips, kubo-fips, headlamp-fips,...
GHSA-QF3Q-3H68-MMH2 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, nri-mysql-fips, tkn-fips, nfs-subdir-external-provisioner-fips, nri-postgresql-fips, azcopy-fips, kafkaexporter-fips, kubernetes, mods, nri-kafka-fips, kubo-fips, headlamp-fips,...
GHSA-QC64-M6C2-V4X7 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, nri-mysql-fips, tkn-fips, nfs-subdir-external-provisioner-fips, nri-postgresql-fips, azcopy-fips, kafkaexporter-fips, kubernetes, mods, nri-kafka-fips, kubo-fips, headlamp-fips,...
GHSA-5M4P-2GJX-P2G8 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, nri-mysql-fips, tkn-fips, nfs-subdir-external-provisioner-fips, nri-postgresql-fips, azcopy-fips, kafkaexporter-fips, kubernetes, mods, nri-kafka-fips, kubo-fips, headlamp-fips,...
GHSA-8G2R-HHVJ-MV99 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, nri-mysql-fips, tkn-fips, nfs-subdir-external-provisioner-fips, nri-postgresql-fips, azcopy-fips, kafkaexporter-fips, kubernetes, mods, nri-kafka-fips, kubo-fips, headlamp-fips,...
CVE-2026-39836 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, elastic-agent, k9s-fips, crossplane-provider-aws-wafv2-fips, nri-mysql-fips, tkn-fips, nfs-subdir-external-provisioner-fips, nri-postgresql-fips, azcopy-fips, kafkaexporter-fips, kubernetes, mods, nri-kafka-fips, kubo-fips, headlamp-fips,...
CVE-2026-33814 vulnerabilities
Vulnerabilities for packages: elastic-agent, kafkaexporter-fips, kubernetes, beats-fips, opencost, fluxcd-kustomize-mutating-webhook, kiali-fips, cloudprober-fips, helmfile, prometheus-node-exporter-fips, kubevirt-cdi-operator, kuberay-operator-fips, crossplane-provider-aws-s3control,...
Azure Linux 3.0 Security Update: prometheus-process-exporter (CVE-2022-46146)
The version of prometheus-process-exporter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-46146 advisory. - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: modelmesh-runtime-adapter, configmap-reload-fips, checksec, addon-resizer, prometheus-bind-exporter, php-fpmexporter, kube-vip-cloud-provider, memcached-exporter-fips, bank-vaults, prometheus-nats-exporter, karpenter-fips, prometheus-node-exporter-fips, gostatsd,...
CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2
CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2. A patched version of the package is available...