GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cilium-cli, kargo, velero, crossplane-provider-azure-sql, hubble, rekor, crossplane-provider-aws-sqs, kubernetes-event-exporter, crossplane-provider-aws-dynamodb, aws-efs-csi-driver, secrets-store-csi-driver-provider-azure, cadvisor, k9s, kyverno-policy-reporter,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: bazelisk, kubernetes-csi-livenessprobe-fips, dockerize, supercronic, govulncheck, nuclei, chainctl, kubeflow-pipelines, kine, azure-aad-pod-identity-mic, nri-memcached, cri-tools, prometheus-alertmanager-fips, aws-efs-csi-driver-fips, cortex, caddy,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: bazelisk, kubernetes-csi-livenessprobe-fips, dockerize, supercronic, govulncheck, nuclei, chainctl, kubeflow-pipelines, kine, azure-aad-pod-identity-mic, nri-memcached, cri-tools, prometheus-alertmanager-fips, aws-efs-csi-driver-fips, cortex, caddy,...

AZL-35594 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35671 CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: logstash-exporter-fips, prometheus-node-exporter-fips, pulumi, prometheus-node-exporter, kube-bench, kargo, rabbitmq-messaging-topology-operator, capslock, rekor, kots, stakater-reloader, rook, timestamp-authority-fips, crossplane-provider-aws-elasticache,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: bazelisk, kubernetes-csi-livenessprobe-fips, dockerize, supercronic, govulncheck, nuclei, chainctl, kubeflow-pipelines, kine, azure-aad-pod-identity-mic, nri-memcached, cri-tools, prometheus-alertmanager-fips, aws-efs-csi-driver-fips, cortex, caddy,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-redis, velero, wait-for-port, shfmt, kubernetes-event-exporter, aws-efs-csi-driver, secrets-store-csi-driver-provider-azure, cadvisor, kyverno-policy-reporter, vexctl, dagger, mongo-tools, argo-workflows, vt-cli, tflint, kubernetes-dns-node-cache, runc,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-redis, velero, wait-for-port, shfmt, kubernetes-event-exporter, aws-efs-csi-driver, secrets-store-csi-driver-provider-azure, cadvisor, kyverno-policy-reporter, vexctl, dagger, mongo-tools, argo-workflows, vt-cli, tflint, kubernetes-dns-node-cache, runc,...

AZL-35670 CVE-2024-24786 affecting package prometheus for versions less than 2.45.4-6

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35593 CVE-2024-24786 affecting package prometheus for versions less than 2.37.9-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

openSUSE: Security Advisory for SUSE Manager Client Tools (SUSE-SU-2023:3144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Golang Prometheus (SUSE-SU-2023:3888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:0512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for prometheus (SUSE-SU-2023:0465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for golang (SUSE-SU-2023:2598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for SUSE Manager Client Tools (SUSE-SU-2023:3868-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19. A patched version of the package is available...

SUSE SLES15 / openSUSE 15 Security Update : golang-github-prometheus-alertmanager (SUSE-SU-2024:0512-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0512-1 advisory. golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: -...

SUSE-SU-2024:0512-1 Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: golang-github-prometheus-alertmanager was updated from version 0.23.0 to 0.26.0 jscPED-7353: - Version 0.26.0: Security fixes: + CVE-2023-40577: Fix stored XSS via the /api/v1/alerts endpoint in the Alertmanager UI...