1843 matches found
GO-2026-5662 vulnerabilities
Vulnerabilities for packages: keda, tempo, minio-object-browser, telegraf, minio, mcp-grafana, karma, loki, cloud-sql-proxy, mc, prometheus-pushgateway, splunk-otel-collector, datadog-agent, certificate-transparency, grafana-pyroscope, jaeger, trillian, minio-operator, aws-otel-collector, istio...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: fluent-bit-plugin-loki, keda, opentelemetry-collector, tempo, prometheus-operator, minio, karma, loki, cloud-sql-proxy, mc, prometheus-pushgateway, prometheus, splunk-otel-collector, datadog-agent, amazon-cloudwatch-agent-operator, certificate-transparency,...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: goreleaser, step-ca, pulumi, hugo, trivy, trino, fluent-bit-plugin-loki, opentelemetry-collector, sigstore-scaffolding, spire-server, argo-workflows, buildkitd, grafana-mimir, druid, guac, py3-cassandra-medusa, tempo, terragrunt, step, hugo-extended, rclone,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, crossplane-provider-aws-s3, kube-bench, pulumi-kubernetes-operator, aws-nuke, crossplane-provider-azure-storage, crossplane-provider-aws-sns, kube-fluentd-operator, crossplane-provider-aws-rds, terraform-provider-azurerm, tofu-controller, hubble-u...
GO-2026-5841 vulnerabilities
Vulnerabilities for packages: minio, kaf, k3d, kine, telegraf, snyk-cli, containerd, kots, spire-server, loki, aactl, zot, flux, k3s, prometheus-operator, nerdctl, kyverno...
GO-2026-5005 vulnerabilities
Vulnerabilities for packages: cilium-cli, cloud-provider-aws, opentelemetry-collector, spire-server, external-dns, buildah, prometheus-operator, telegraf, minio, gitlab-kas, kine, kots, loki, zot, cert-manager, flux, k3s, prometheus, falco-no-driver, nerdctl, knative-serving, containerd, aactl,...
GO-2026-4976 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch, cilium-cli, kube-fluentd-operator, trino, fluent-bit-plugin-loki, coredns, prometheus-operator, telegraf, minio, kubernetes-csi-node-driver-registrar, argo-cd, karma, kots, dask-gateway, zot, libnvidia-container, cert-manager, flux, k3s, prometheu...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: cilium-cli, cloud-provider-aws, crossplane-provider-aws-s3, pulumi-kubernetes-operator, rancher-machine, terraform-provider-azurerm, crossplane-provider-azure-storage, crossplane-provider-aws-sns, crossplane-provider-aws-rds, terraform-provider-azapi,...
GO-2026-5014 vulnerabilities
Vulnerabilities for packages: cilium-cli, cloud-provider-aws, trivy, opentelemetry-collector, spire-server, flux-image-automation-controller, external-dns, prometheus-operator, telegraf, osv-scanner, minio, gitlab-kas, kine, kots, loki, zot, cert-manager, flux, k3s, docker-machine-driver-harveste...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: cilium-cli, kube-bench, mongo-tools, nats-server-config-reloader, docker-cli, spire-controller-manager, terraform-provider-azapi, timescaledb-tune, guac, tempo, wire-go, chartmuseum, headlamp, helm-operator, envconsul, rclone, prometheus-operator, yunikorn-k8shim,...
GO-2025-3488 vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, crossplane-provider-aws-s3, terraform-provider-azurerm, hubble-ui, kubernetes-csi-external-provisioner, temporal-server, kiali, xeol, grafana-operator, crossplane-provider-azure-managedidentity, containerd, bank-vaults, grafana-alloy,...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, terraform-provider-azurerm, hubble-ui, go-licenses, osv-scanner, kubernetes-csi-external-provisioner, newrelic-prometheus-configurator, wazero, gosu, grafana-operator, crossplane-provider-azure-managedidentity, bank-vaults, grafana-alloy,...
GO-2024-2825 vulnerabilities
Vulnerabilities for packages: cilium-cli, kube-bench, pulumi-kubernetes-operator, mongo-tools, hubble-ui, guac, tempo, wire-go, chartmuseum, kyverno-policy-reporter-ui, go-licenses, helm-operator, rclone, eksctl, stern, osv-scanner, kubernetes-csi-external-provisioner,...
CVE-2026-73654 Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPathoperation.key.setnewMetadata, value in...
CVE-2026-67990
basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user's browser to submit requests that are forwarded to enabled upstream write or management...
CLEANSTART-2026-GL72878 Security fixes in prometheus 3.13.1-r1
Package prometheus version 3.13.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-IU92725 Security fixes in prometheus-alertmanager 0.32.0-r0
Package prometheus-alertmanager version 0.32.0-r0 fixes 2 vulnerabilities: CVE-2026-39882, CVE-2026-39883...
CLEANSTART-2026-AV59470 Security fixes in prometheus-node-exporter 1.12.1-r0
Package prometheus-node-exporter version 1.12.1-r0 fixes 1 vulnerabilities: CVE-2026-28735...