CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...

AZL-93285 CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4

CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4. A patched version of the package is available...

AZL-88254 CVE-2026-39821 affecting package prometheus-process-exporter for versions less than 0.8.2-4

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

GHSA-3V2C-X6Q9-F697 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, temporal-fips, crossplane-provider-aws-sagemaker, beats-fips, crossplane-provider-azure-spring, k8s-metacollector-fips,...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, temporal-fips, crossplane-provider-aws-sagemaker, beats-fips, crossplane-provider-azure-spring, k8s-metacollector-fips,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, temporal-fips, crossplane-provider-aws-sagemaker, beats-fips, crossplane-provider-azure-spring, k8s-metacollector-fips,...

CVE-2026-39826 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, temporal-fips, crossplane-provider-aws-sagemaker, beats-fips, crossplane-provider-azure-spring, k8s-metacollector-fips,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, git-lfs-fips, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, aws-privateca-issuer-fips,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, git-lfs-fips, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, aws-privateca-issuer-fips,...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, git-lfs-fips, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, aws-privateca-issuer-fips,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, git-lfs-fips, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, aws-privateca-issuer-fips,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, git-lfs-fips, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, aws-privateca-issuer-fips,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, git-lfs-fips, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, aws-privateca-issuer-fips,...

GHSA-5M4P-2GJX-P2G8 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, git-lfs-fips, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, aws-privateca-issuer-fips,...

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, git-lfs-fips, policy-bot-fips, step-ca-fips, k8s-agents-operator, spire-server-fips, gatus-fips, k8s-driver-manager-fips, http-echo, temporal-fips, crossplane-provider-aws-sagemaker, gpu-operator-fips, aws-privateca-issuer-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, policy-bot-fips, temporal-fips, verticadb-operator-fips, k8s-metacollector-fips, eks-distro-fips, drone-fips, mountpoint-s3-csi-driver, step-fips, aws-iam-authenticator-fips, terraform-provider-azurerm-fips, opentofu-fips,...

Azure Linux 3.0 Security Update: prometheus-process-exporter (CVE-2022-46146)

The version of prometheus-process-exporter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-46146 advisory. - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: consul-fips, php-fpmexporter, knative-eventing-fips, blob-csi-fips, eks-distro-fips, mattmoor-chainit, vexctl, nvidia-nsight-compute-12.9, kubernetes-dashboard-fips, node-problem-detector-fips, terraform-provider-tls-fips, kuberay-operator, newrelic-fluent-bit-output...

CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2

CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2. A patched version of the package is available...