GHSA-VHXF-7VQR-MRJG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, grafana-image-renderer...

CVE-2025-26791 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-26791 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, grafana-image-renderer...

CVE-2022-31176

Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headless browser Chromium/Chrome. An internal security review identified an unauthorized file disclosure vulnerability. It is possible for a malicious user to retrieve unauthorized fil...

PT-2025-42318

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 141.0.7390.107 Chromium versions prior to 141.0.7390.107 Description A use-after-free issue exists in the Safe Browsing component of Google Chrome and Chromium. This allows a remote attacker who has compromised...

Malicious code in fluid-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c91755cc441a577f7a891af00b7ad8e1a9de715f40002af3df668be2b19d571 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11980 Malicious code in fluid-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c91755cc441a577f7a891af00b7ad8e1a9de715f40002af3df668be2b19d571 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fluid-renderer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GeoServer < 2.23.4 Multiples Vulnerabilities

According to its banner, the version of GeoServer running on the remote host is prior to 2.23.5 or 2.24.0 prior to 2.24.2. It is, therefore, affected by Multiples Vulnerabilities : - An Arbitrary file upload vulnerability in REST Coverage Store API - A Stored Cross-Site Scripting XSS vulnerabilit...

GHSA-RHX6-C78J-4Q9W vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, grafana-image-renderer, kubeflow-centraldashboard, sqlpad, thingsboard, tileserver-gl-fips, argo-workflows, arangodb, tileserver-gl...

CVE-2024-9369: Improper Validation of Specified Quantity in Input

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in Skia in Google Chrome prior to version 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2024-11114

Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-11113

Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-11113

Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-11114

Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-11114

Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2024-11114

Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-11113

Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...