CLEANSTART-2026-QQ16629 Security fix for CVE-2020-16248 applied in: prometheus-blackbox-exporter 0.18.0-r0

Security vulnerability affects the prometheus-blackbox-exporter package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OT08451 Security fix for CVE-2026-40898 applied in: kube-metrics-adapter 0.2.9-r0, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, prometheus-blackbox-exporter 0.28.0-r2

CVE-2026-40898 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UQ52900 Security fixes in prometheus-blackbox-exporter 0.28.0-r1

Package prometheus-blackbox-exporter version 0.28.0-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

OPENSUSE-SU-2026:10971-1 prometheus-blackbox_exporter-0.26.0-6.1 on GA media

These are all security issues fixed in the prometheus-blackboxexporter-0.26.0-6.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, emissary, croc, q, terraform-provider-aws, vault-secrets-webhook, hugo, nova, nri-redis, litestream, libnvidia-container, rook, timoni, cloud-provider-aws, metacontroller, clickhouse-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, emissary, croc, q, terraform-provider-aws, vault-secrets-webhook, hugo, nova, nri-redis, litestream, libnvidia-container, rook, timoni, cloud-provider-aws, metacontroller, clickhouse-operator,...

CLEANSTART-2026-YM28538 Prometheus Blackbox Exporter through 0

Multiple security vulnerabilities affect the prometheus-blackbox-exporter package. Prometheus Blackbox Exporter through 0. See references for individual vulnerability details...

CLEANSTART-2026-ZL24388 Prometheus Blackbox Exporter through 0

Multiple security vulnerabilities affect the prometheus-blackbox-exporter package. Prometheus Blackbox Exporter through 0. See references for individual vulnerability details...

Linux Distros Unpatched Vulnerability : CVE-2020-16248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both...

prometheus-blackbox_exporter-0.24.0-3.1 on GA media (moderate)

prometheus-blackboxexporter-0.24.0-3.1 on GA media Announcement ID: openSUSE-SU-2025:15162-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2025-22870 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUSE : 6.9...

OPENSUSE-SU-2025:15162-1 prometheus-blackbox_exporter-0.24.0-3.1 on GA media

These are all security issues fixed in the prometheus-blackboxexporter-0.24.0-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2020-16248

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, aws-efs-csi-driver-fips, kube-oidc-proxy, aactl, dgraph, plutono-fips, spark-operator, prometheus-stackdriver-exporter, kubeflow, kubernetes-csi-livenessprobe-fips, cortex, slsa-verifier, bank-vaults-fips, conftest-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, aactl, buildkitd, kubeflow, src, spark-operator, scorecard, terraform-provider-sendgrid, up, k3d, dgraph, kubescape, cortex, slsa-verifier...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kube-logging-logging-operator, kubeflow-katib, crossplane-provider-azure, gke-gcloud-auth-plugin, sigstore-scaffolding, flux-helm-controller, flux-kustomize-controller, gitness, dynamic-localpv-provisioner, slsa-verifier, caddy, prometheus-mysqld-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ollama, git-lfs, certificate-transparency, cortex, kubeflow, sigstore-scaffolding, minio, terraform-provider-aws, dex, fuse-overlayfs-snapshotter, hugo, terraform-provider-azurerm, pulumi-language-java, conftest, kind, aactl, stakater-reloader, pulumi-language-dotnet...

SUSE-SU-2023:3122-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: python-tornado: - Security fixes: CVE-2023-28370: Fixed an open redirect issue in the static file handler bsc1211741 kiwi-desc-saltboot: - Update to version 0.1.1687520761.cefb248 Add osimage cert package to bootstrap for SUSE Linux Enterprise 12 images...

SUSE-SU-2022:3382-1 Security update for permissions

This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths bsc1203018. - Add capability for prometheus-blackboxexporter bsc1191194. - Make btmp root:utmp bsc1050467...

Prometheus Blackbox Exporter Code Issue Vulnerability

Prometheus Blackbox Exporter is a blackbox exporter released by the Linux Foundation in the United States that allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP. A code issue vulnerability exists in Prometheus Blackbox Exporter 0.17.0 and earlier versions. The vulnerability...

DEBIAN-CVE-2020-16248

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability...