[SECURITY] Fedora 41 Update: rust-monitord-exporter-0.4.1-2.fc41

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

[SECURITY] Fedora 42 Update: rust-monitord-exporter-0.4.1-5.fc42

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

BIT-ENVOY-GATEWAY-2025-24030 Envoy Admin Interface Exposed through prometheus metrics endpoint

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a path traversal attack to execute Envoy Admin interface commands on proxies managed by any version of Envoy Gateway prior...

CVE-2025-9566 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, prometheus-podman-exporter...

GHSA-WP3J-XQ48-XPJW vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, prometheus-podman-exporter...

Linux Distros Unpatched Vulnerability : CVE-2019-3826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored, DOM based, cross-site scripting XSS flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated...

MAL-2025-41719 Malicious code in prometheus-api-metrics (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in prometheus-api-metrics (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2022-4289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2...

Linux Distros Unpatched Vulnerability : CVE-2023-1733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to...

Linux Distros Unpatched Vulnerability : CVE-2021-29622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless...

Linux Distros Unpatched Vulnerability : CVE-2020-16248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both...

ROS-20250822-10

Vulnerability in clientgolang library of Prometheus event monitoring and notification application is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2022-3613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15....

Linux Distros Unpatched Vulnerability : CVE-2021-22166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method CVE-2021-22166 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2021-22178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration...

Malicious code in prometheus-stats-library (npm)

The package prometheus-stats-library was found to contain malicious code...

MAL-2025-30729 Malicious code in prometheus-stats-library (npm)

The package prometheus-stats-library was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: yam, direnv, overmind, op-geth, portieris, verticadb-operator, crossplane-provider-family-azure, atlantis, etcd, hubble, kubernetes-dashboard-api, nginx-prometheus-exporter, nova, conjur-cli, kube-metrics-adapter, docker-machine-driver-harvester, docker, trillian,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver, elvish, flux-helm-controller, hubble, nvidia-container-toolkit, flux-image-automation-controller, kubernetes-dashboard-api-fips, k3d, newrelic-infra-operator, seaweedfs, trillian, temporal-server-fips, flyte, harbor-scanner-trivy-fips,...