CVE-2025-11065 affecting package telegraf for versions less than 1.31.0-15

CVE-2025-11065 affecting package telegraf for versions less than 1.31.0-15. A patched version of the package is available...

CVE-2025-58190 affecting package telegraf for versions less than 1.31.0-15

CVE-2025-58190 affecting package telegraf for versions less than 1.31.0-15. A patched version of the package is available...

CVE-2026-26014 affecting package telegraf for versions less than 1.29.4-21

CVE-2026-26014 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...

CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21

CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...

CVE-2025-11065 affecting package telegraf for versions less than 1.29.4-21

CVE-2025-11065 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...

CVE-2025-47911 affecting package telegraf for versions less than 1.29.4-21

CVE-2025-47911 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...

CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21

CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, grype-db, tekton-chains, envoy-gateway-fips, kong-ingress-controller, kyverno-notation-aws, flux-kustomize-controller-fips, cosign, cluster-api-azure-controller, rke2-runtime-fips, grafana-fips, kube-arangodb-fips, blob-csi-fips,...

CVE-2026-27571 affecting package telegraf for versions less than 1.31.0-13

CVE-2026-27571 affecting package telegraf for versions less than 1.31.0-13. A patched version of the package is available...

CVE-2026-27571 affecting package telegraf for versions less than 1.29.4-19

CVE-2026-27571 affecting package telegraf for versions less than 1.29.4-19. A patched version of the package is available...

AZL-78372 CVE-2026-27571 affecting package telegraf for versions less than 1.29.4-21

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The WebSockets handling of NATS messages handles compressed messages via the WebSockets negotiated compression. Prior to versions 2.11.2 and 2.12.3, the implementation bound the memory size of a NATS...

CVE-2026-26014 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, k3s, kubo, spegel, telegraf...

GHSA-9F3F-WV7R-QC8R vulnerabilities

Vulnerabilities for packages: ipfs-cluster, k3s, kubo, spegel, telegraf...

AZL-78216 CVE-2026-26958 affecting package telegraf 1.31.0-15

filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If Point.MultiScalarMult i...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: dgraph, juicefs, spicedb, trufflehog, nuclei, step-ca, mariadb-operator, envoy-gateway, flux-kustomize-controller, sqlexporter, tailscale, temporal, argo-workflows, splunk-otel-collector, cerbos, minio, step-issuer, spire-server, k3s, sops, tkn, ksops, seaweedfs,...

AZL-77645 CVE-2026-26014 affecting package telegraf for versions less than 1.29.4-21

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...

AZL-77649 CVE-2026-26014 affecting package telegraf 1.31.0-12

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...

AZL-77547 CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21

The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not...

AZL-77559 CVE-2026-2303 affecting package telegraf 1.31.0-12

The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not...

AZL-77055 CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...