CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.8.2-1

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45142 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-45142 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

GHSA-MH55-GQVF-XFWM vulnerabilities

Vulnerabilities for packages: cortex, prometheus-alertmanager, grafana-mimir, fulcio, rekor, timestamp-authority...

CBL Mariner 2.0 Security Update: cri-tools / docker-buildx / kubernetes / opa / prometheus (CVE-2023-45142)

The version of cri-tools / docker-buildx / kubernetes / opa / prometheus installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45142 advisory. - OpenTelemetry-Go Contrib is a collection of third-party...

OPENSUSE-SU-2024:14092-1 golang-github-prometheus-prometheus-2.53.0-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.53.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-24791 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, kyverno-policy-reporter-kyverno-plugin, wavefront-collector-for-kubernetes, configmap-reload, wgcf, nvidia-nsight-compute-12.8, mkcert, metallb, gitsign, jsonnet-bundler, dive, thanos-operator, actions-runner-controller-fips,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: scorecard, zarf, guac, bank-vaults-fips, opentelemetry-collector-contrib, tekton-chains-fips, kubernetes-event-exporter, argo-events, crossplane-provider-azure-sql, gitsign, falcoctl-fips, kubescape, ksops, actions-runner-controller-fips, k3d, vault-csi-provider,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: scorecard, zarf, guac, bank-vaults-fips, opentelemetry-collector-contrib, tekton-chains-fips, kubernetes-event-exporter, argo-events, crossplane-provider-azure-sql, gitsign, falcoctl-fips, kubescape, ksops, actions-runner-controller-fips, k3d, vault-csi-provider,...

AZL-42928 CVE-2024-6104 affecting package prometheus for versions less than 2.37.0-14

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

AZL-42898 CVE-2024-6104 affecting package prometheus for versions less than 2.45.4-3

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

Security Bulletin: IBM DataPower Gateway is vulnerable to denial of service due to Golang Go

Summary IBM DataPower Gateway is vulnerable to denial of service due to use of Golang Go in DataPower Operator and Prometheus Metrics . CVE-2024-24783 Vulnerability Details CVEID:CVE-2024-24783 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw in the crypto/x509 packag...

OPENSUSE-SU-2024:12637-1 golang-github-prometheus-node_exporter-1.5.0-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-nodeexporter-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10814-1 golang-github-prometheus-prometheus-2.27.1-4.2 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.27.1-4.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12650-1 golang-github-prometheus-prometheus-2.41.0-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.41.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12872-1 prometheus-postgres_exporter-0.10.1-2.1 on GA media

These are all security issues fixed in the prometheus-postgresexporter-0.10.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13604-1 golang-github-prometheus-prometheus-2.48.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.48.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13143-1 golang-github-prometheus-prometheus-2.46.0-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.46.0-2.1 package on the GA media of openSUSE Tumbleweed...