AZL-94314 CVE-2026-48586 affecting package telegraf for versions less than 1.31.0-28

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

AZL-94320 CVE-2026-43871 affecting package telegraf for versions less than 1.31.0-26

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

AZL-93321 CVE-2026-56852 affecting package telegraf for versions less than 1.31.0-27

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-58207 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58207 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58209 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58209 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58251 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58251 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58253 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58253 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58208 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58208 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

AZL-92241 CVE-2026-58207 affecting package telegraf for versions less than 1.31.0-27

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client able to send account-scoped connection monitoring requests could crash the server by supplying Connz pagination Offset and Limit values that overflowed internal...

AZL-92259 CVE-2026-58253 affecting package telegraf for versions less than 1.31.0-27

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when noauthuser was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an...

AZL-92244 CVE-2026-58251 affecting package telegraf for versions less than 1.31.0-27

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user with subscription deny permissions could bypass a plain subject deny rule by using a queue subscription, because queue-specific deny...

GHSA-JFWF-28XR-XW6Q vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-41179 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-25QR-6MPR-F7QX vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-41176 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kine, kube-state-metrics, opentelemetry-collector, telegraf, trivy-operator-fips, knative-kafka-broker, aactl, chisel-fips, backup-restore-operator, flux-fips, helm, mattermost-fips, zarf, chisel, flux-source-controller-fips, drone-fips, loki, kubescape-server,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: scorecard, rancher-agent, sops, crossplane-provider-azure-authorization, nerdctl, gh, cilium-cli, chezmoi, crossplane-provider-azure-storage, fulcio, pulumi-language-java, docker-machine-driver-harvester, rancher, cosign, grype, gptscript, nfpm, telegraf,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kaf, rancher-agent, k9s, mattermost, k3s, gitlab-kas, nerdctl, kubernetes-dashboard, snyk-cli, skaffold, containerd, external-secrets-operator, trivy, chisel, cilium-cli, helm, prometheus-operator, argocd-image-updater, zot, flux-image-automation-controller,...