Every CVE Search/ Get API key

CVE-2019-10215

Cross-site Scripting in Bootstrap-3-Typeahead

6.1 MediumFix available

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

1.53%Unchanged since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.1

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.

Record
CVE-2019-10215
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
EUVDEUVD-2019-2230 6.1

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.

Record
EUVD-2019-2230
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-m2hm-hrr2-6p2q 6.1

Cross-site Scripting in Bootstrap-3-Typeahead

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser. This issue was introduced in commit dbd1af5bf and has not been fixed.

Record
GHSA-m2hm-hrr2-6p2q
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
NVD 6.1

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.

Record
CVE-2019-10215
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVopenSUSE-SU-2020:1105-1 No score

Security update for SUSE Manager Client Tools

This update fixes the following issues:

dracut-saltboot:

  • Print a list of available disk devices (bsc#1170824)
  • Install wipefs to initrd
  • Force install crypt modules

golang-github-prometheus-prometheus:

  • Update change log and spec file
    • Modified spec file: default to golang 1.14 to avoid 'have choice' build issues in OBS.
    • Rebase and update patches for version 2.18.0
  • Update to 2.18.0
    • Features
      • Tracing: Added experimental Jaeger support #7148
    • Changes
      • Federation: Only use local TSDB for federation (ignore remote read). #7096
      • Rules: rule_evaluations_total and rule_evaluation_failures_total have a rule_group label now. #7094
    • Enhancements
      • TSDB: Significantly reduce WAL size kept around after a block cut. #7098
      • Discovery: Add architecture meta label for EC2. #7000
    • Bug fixes
      • UI: Fixed wrong MinTime reported by /status. #7182
      • React UI: Fixed multiselect legend on OSX. #6880
      • Remote Write: Fixed blocked resharding edge case. #7122
      • Remote Write: Fixed remote write not updating on relabel configs change. #7073
  • Changes from 2.17.2
    • Bug fixes
      • Federation: Register federation metrics #7081
      • PromQL: Fix panic in parser error handling #7132
      • Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
      • TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
      • TSDB: Make isolation more robust to panics in web handlers #7129 #7136
  • Changes from 2.17.1
    • Bug fixes
      • TSDB: Fix query performance regression that increased memory and CPU usage #7051
  • Changes from 2.17.0
    • Features
      • TSDB: Support isolation #6841
      • This release implements isolation in TSDB. API queries and recording rules are guaranteed to only see full scrapes and full recording rules. This comes with a certain overhead in resource usage. Depending on the situation, there might be some increase in memory usage, CPU usage, or query latency.
    • Enhancements
      • PromQL: Allow more keywords as metric names #6933
      • React UI: Add normalization of localhost URLs in targets page #6794
      • Remote read: Read from remote storage concurrently #6770
      • Rules: Mark deleted rule series as stale after a reload #6745
      • Scrape: Log scrape append failures as debug rather than warn #6852
      • TSDB: Improve query performance for queries that partially hit the head #6676
      • Consul SD: Expose service health as meta label #5313
      • EC2 SD: Expose EC2 instance lifecycle as meta label #6914
      • Kubernetes SD: Expose service type as meta label for K8s service role #6684
      • Kubernetes SD: Expose label_selector and field_selector #6807
      • Openstack SD: Expose hypervisor id as meta label #6962
    • Bug fixes
      • PromQL: Do not escape HTML-like chars in query log #6834 #6795
      • React UI: Fix data table matrix values #6896
      • React UI: Fix new targets page not loading when using non-ASCII characters #6892
      • Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
      • Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
      • Scrape: Prevent removal of metric names upon relabeling #6891
      • Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
      • Scrape: Fix crash when reloads are separated by two scrape intervals #7011
  • Changes from 2.16.0
    • Features
      • React UI: Support local timezone on /graph #6692
      • PromQL: add absent_over_time query function #6490
      • Adding optional logging of queries to their own file #6520
    • Enhancements
      • React UI: Add support for rules page and 'Xs ago' duration displays #6503
      • React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
      • TSDB: Export metric for WAL write errors #6647
      • TSDB: Improve query performance for queries that only touch…
Record
openSUSE-SU-2020:1105-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10814-1 No score

golang-github-prometheus-prometheus-2.27.1-4.2 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.27.1-4.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10814-1
Updated
2026-11-02
Show 5 moreShow less
OSVSUSE-SU-2020:1715-1 No score

Security Beta update for SUSE Manager Client Tools and Salt

This update fixes the following issues:

dracut-saltboot:

  • Print a list of available disk devices (bsc#1170824)
  • Install wipefs to initrd
  • Force install crypt modules
  • Add missing terminal naming modifiers as exported veriables

golang-github-prometheus-prometheus:

  • Update change log and spec file
    • Modified spec file: default to golang 1.14 to avoid 'have choice' build issues in OBS.
    • Rebase and update patches for version 2.18.0
    • Changed:
      • 0002-Default-settings.patch Changed
  • Update to 2.18.0
    • Features
      • Tracing: Added experimental Jaeger support #7148
    • Changes
      • Federation: Only use local TSDB for federation (ignore remote read). #7096
      • Rules: rule_evaluations_total and rule_evaluation_failures_total have a rule_group label now. #7094
    • Enhancements
      • TSDB: Significantly reduce WAL size kept around after a block cut. #7098
      • Discovery: Add architecture meta label for EC2. #7000
    • Bug fixes
      • UI: Fixed wrong MinTime reported by /status. #7182
      • React UI: Fixed multiselect legend on OSX. #6880
      • Remote Write: Fixed blocked resharding edge case. #7122
      • Remote Write: Fixed remote write not updating on relabel configs change. #7073
  • Changes from 2.17.2
    • Bug fixes
      • Federation: Register federation metrics #7081
      • PromQL: Fix panic in parser error handling #7132
      • Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
      • TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
      • TSDB: Make isolation more robust to panics in web handlers #7129 #7136
  • Changes from 2.17.1
    • Bug fixes
      • TSDB: Fix query performance regression that increased memory and CPU usage #7051
  • Changes from 2.17.0
    • Features
      • TSDB: Support isolation #6841
      • This release implements isolation in TSDB. API queries and recording rules are guaranteed to only see full scrapes and full recording rules. This comes with a certain overhead in resource usage. Depending on the situation, there might be some increase in memory usage, CPU usage, or query latency.
    • Enhancements
      • PromQL: Allow more keywords as metric names #6933
      • React UI: Add normalization of localhost URLs in targets page #6794
      • Remote read: Read from remote storage concurrently #6770
      • Rules: Mark deleted rule series as stale after a reload #6745
      • Scrape: Log scrape append failures as debug rather than warn #6852
      • TSDB: Improve query performance for queries that partially hit the head #6676
      • Consul SD: Expose service health as meta label #5313
      • EC2 SD: Expose EC2 instance lifecycle as meta label #6914
      • Kubernetes SD: Expose service type as meta label for K8s service role #6684
      • Kubernetes SD: Expose label_selector and field_selector #6807
      • Openstack SD: Expose hypervisor id as meta label #6962
    • Bug fixes
      • PromQL: Do not escape HTML-like chars in query log #6834 #6795
      • React UI: Fix data table matrix values #6896
      • React UI: Fix new targets page not loading when using non-ASCII characters #6892
      • Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
      • Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
      • Scrape: Prevent removal of metric names upon relabeling #6891
      • Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
      • Scrape: Fix crash when reloads are separated by two scrape intervals #7011
  • Changes from 2.16.0
    • Features
      • React UI: Support local timezone on /graph #6692
      • PromQL: add absent_over_time query function #6490
      • Adding optional logging of queries to their own file #6520
    • Enhancements
      • React UI: Add support for rules page and 'Xs ago' duration displays #6503
      • React UI: alerts page, replace filtering togglers tabs with checkboxes #6543 …
Record
SUSE-SU-2020:1715-1
Updated
2026-11-02
OSVSUSE-SU-2020:1718-1 No score

Security Beta update for SUSE Manager Client Tools and Salt

This update fixes the following issues:

cobbler:

  • Calculate relative path for kernel and inited when generating grub entry (bsc#1170231) Added: fix-grub2-entry-paths.diff
  • Fix os-release version detection for SUSE Modified: sles15.patch
  • Jinja2 template library fix (bsc#1141661)
  • Removes string replace for textmode fix (bsc#1134195)

golang-github-prometheus-prometheus:

  • Update change log and spec file
    • Modified spec file: default to golang 1.14 to avoid 'have choice' build issues in OBS.
    • Rebase and update patches for version 2.18.0
    • Changed:
      • 0002-Default-settings.patch Changed
  • Update to 2.18.0
    • Features
      • Tracing: Added experimental Jaeger support #7148
    • Changes
      • Federation: Only use local TSDB for federation (ignore remote read). #7096
      • Rules: rule_evaluations_total and rule_evaluation_failures_total have a rule_group label now. #7094
    • Enhancements
      • TSDB: Significantly reduce WAL size kept around after a block cut. #7098
      • Discovery: Add architecture meta label for EC2. #7000
    • Bug fixes
      • UI: Fixed wrong MinTime reported by /status. #7182
      • React UI: Fixed multiselect legend on OSX. #6880
      • Remote Write: Fixed blocked resharding edge case. #7122
      • Remote Write: Fixed remote write not updating on relabel configs change. #7073
  • Changes from 2.17.2
    • Bug fixes
      • Federation: Register federation metrics #7081
      • PromQL: Fix panic in parser error handling #7132
      • Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
      • TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
      • TSDB: Make isolation more robust to panics in web handlers #7129 #7136
  • Changes from 2.17.1
    • Bug fixes
      • TSDB: Fix query performance regression that increased memory and CPU usage #7051
  • Changes from 2.17.0
    • Features
      • TSDB: Support isolation #6841
      • This release implements isolation in TSDB. API queries and recording rules are guaranteed to only see full scrapes and full recording rules. This comes with a certain overhead in resource usage. Depending on the situation, there might be some increase in memory usage, CPU usage, or query latency.
    • Enhancements
      • PromQL: Allow more keywords as metric names #6933
      • React UI: Add normalization of localhost URLs in targets page #6794
      • Remote read: Read from remote storage concurrently #6770
      • Rules: Mark deleted rule series as stale after a reload #6745
      • Scrape: Log scrape append failures as debug rather than warn #6852
      • TSDB: Improve query performance for queries that partially hit the head #6676
      • Consul SD: Expose service health as meta label #5313
      • EC2 SD: Expose EC2 instance lifecycle as meta label #6914
      • Kubernetes SD: Expose service type as meta label for K8s service role #6684
      • Kubernetes SD: Expose label_selector and field_selector #6807
      • Openstack SD: Expose hypervisor id as meta label #6962
    • Bug fixes
      • PromQL: Do not escape HTML-like chars in query log #6834 #6795
      • React UI: Fix data table matrix values #6896
      • React UI: Fix new targets page not loading when using non-ASCII characters #6892
      • Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
      • Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
      • Scrape: Prevent removal of metric names upon relabeling #6891
      • Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
      • Scrape: Fix crash when reloads are separated by two scrape intervals #7011
  • Changes from 2.16.0
    • Features
      • React UI: Support local timezone on /graph #6692
      • PromQL: add absent_over_time query function #6490
      • Adding optional logging of queries to their own file #6520
    • Enhancements
      • React UI: Add support for rules page and…
Record
SUSE-SU-2020:1718-1
Updated
2026-11-02
OSVSUSE-SU-2020:1970-1 No score

Security update for SUSE Manager Client Tools

This update fixes the following issues:

cobbler:

  • Calculate relative path for kernel and inited when generating grub entry (bsc#1170231) Added: fix-grub2-entry-paths.diff
  • Fix os-release version detection for SUSE Modified: sles15.patch
  • Jinja2 template library fix (bsc#1141661)
  • Removes string replace for textmode fix (bsc#1134195)

golang-github-prometheus-node_exporter:

  • Update to 0.18.1
    • [BUGFIX] Fix incorrect sysctl call in BSD meminfo collector, resulting in broken swap metrics on FreeBSD #1345
    • [BUGFIX] Fix rollover bug in mountstats collector #1364
    • Renamed interface label to device in netclass collector for consistency with
    • other network metrics #1224
    • The cpufreq metrics now separate the cpufreq and scaling data based on what the driver provides. #1248
    • The labels for the network_up metric have changed, see issue #1236
    • Bonding collector now uses mii_status instead of operstatus #1124
    • Several systemd metrics have been turned off by default to improve performance #1254
    • These include unit_tasks_current, unit_tasks_max, service_restart_total, and unit_start_time_seconds
    • The systemd collector blacklist now includes automount, device, mount, and slice units by default. #1255
    • [CHANGE] Bonding state uses mii_status #1124
    • [CHANGE] Add a limit to the number of in-flight requests #1166
    • [CHANGE] Renamed interface label to device in netclass collector #1224
    • [CHANGE] Add separate cpufreq and scaling metrics #1248
    • [CHANGE] Several systemd metrics have been turned off by default to improve performance #1254
    • [CHANGE] Expand systemd collector blacklist #1255
    • [CHANGE] Split cpufreq metrics into a separate collector #1253
    • [FEATURE] Add a flag to disable exporter metrics #1148
    • [FEATURE] Add kstat-based Solaris metrics for boottime, cpu and zfs collectors #1197
    • [FEATURE] Add uname collector for FreeBSD #1239
    • [FEATURE] Add diskstats collector for OpenBSD #1250
    • [FEATURE] Add pressure collector exposing pressure stall information for Linux #1174
    • [FEATURE] Add perf exporter for Linux #1274
    • [ENHANCEMENT] Add Infiniband counters #1120
    • [ENHANCEMENT] Add TCPSynRetrans to netstat default filter #1143
    • [ENHANCEMENT] Move network_up labels into new metric network_info #1236
    • [ENHANCEMENT] Use 64-bit counters for Darwin netstat
    • [BUGFIX] Add fallback for missing /proc/1/mounts #1172
    • [BUGFIX] Fix node_textfile_mtime_seconds to work properly on symlinks #1326
  • Add network-online (Wants and After) dependency to systemd unit bsc#1143913

golang-github-prometheus-prometheus:

  • Update change log and spec file
    • Modified spec file: default to golang 1.14 to avoid 'have choice' build issues in OBS.
    • Rebase and update patches for version 2.18.0
    • Changed:
      • 0002-Default-settings.patch Changed
  • Update to 2.18.0
    • Features
      • Tracing: Added experimental Jaeger support #7148
    • Changes
      • Federation: Only use local TSDB for federation (ignore remote read). #7096
      • Rules: rule_evaluations_total and rule_evaluation_failures_total have a rule_group label now. #7094
    • Enhancements
      • TSDB: Significantly reduce WAL size kept around after a block cut. #7098
      • Discovery: Add architecture meta label for EC2. #7000
    • Bug fixes
      • UI: Fixed wrong MinTime reported by /status. #7182
      • React UI: Fixed multiselect legend on OSX. #6880
      • Remote Write: Fixed blocked resharding edge case. #7122
      • Remote Write: Fixed remote write not updating on relabel configs change. #7073
  • Changes from 2.17.2
    • Bug fixes
      • Federation: Register federation metrics #7081
      • PromQL: Fix panic in parser error handling #7132
      • Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
      • TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
      • TSDB: Make isolation more robust to panics in web handlers #7129 #7136
  • Changes from 2.17.1
    • Bug…
Record
SUSE-SU-2020:1970-1
Updated
2026-11-02
OSVSUSE-SU-2020:1972-1 No score

Security update for SUSE Manager Client Tools

This update fixes the following issues:

dracut-saltboot:

  • Print a list of available disk devices (bsc#1170824)
  • Install wipefs to initrd
  • Force install crypt modules

golang-github-prometheus-prometheus:

  • Update change log and spec file
    • Modified spec file: default to golang 1.14 to avoid 'have choice' build issues in OBS.
    • Rebase and update patches for version 2.18.0
  • Update to 2.18.0
    • Features
      • Tracing: Added experimental Jaeger support #7148
    • Changes
      • Federation: Only use local TSDB for federation (ignore remote read). #7096
      • Rules: rule_evaluations_total and rule_evaluation_failures_total have a rule_group label now. #7094
    • Enhancements
      • TSDB: Significantly reduce WAL size kept around after a block cut. #7098
      • Discovery: Add architecture meta label for EC2. #7000
    • Bug fixes
      • UI: Fixed wrong MinTime reported by /status. #7182
      • React UI: Fixed multiselect legend on OSX. #6880
      • Remote Write: Fixed blocked resharding edge case. #7122
      • Remote Write: Fixed remote write not updating on relabel configs change. #7073
  • Changes from 2.17.2
    • Bug fixes
      • Federation: Register federation metrics #7081
      • PromQL: Fix panic in parser error handling #7132
      • Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
      • TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
      • TSDB: Make isolation more robust to panics in web handlers #7129 #7136
  • Changes from 2.17.1
    • Bug fixes
      • TSDB: Fix query performance regression that increased memory and CPU usage #7051
  • Changes from 2.17.0
    • Features
      • TSDB: Support isolation #6841
      • This release implements isolation in TSDB. API queries and recording rules are guaranteed to only see full scrapes and full recording rules. This comes with a certain overhead in resource usage. Depending on the situation, there might be some increase in memory usage, CPU usage, or query latency.
    • Enhancements
      • PromQL: Allow more keywords as metric names #6933
      • React UI: Add normalization of localhost URLs in targets page #6794
      • Remote read: Read from remote storage concurrently #6770
      • Rules: Mark deleted rule series as stale after a reload #6745
      • Scrape: Log scrape append failures as debug rather than warn #6852
      • TSDB: Improve query performance for queries that partially hit the head #6676
      • Consul SD: Expose service health as meta label #5313
      • EC2 SD: Expose EC2 instance lifecycle as meta label #6914
      • Kubernetes SD: Expose service type as meta label for K8s service role #6684
      • Kubernetes SD: Expose label_selector and field_selector #6807
      • Openstack SD: Expose hypervisor id as meta label #6962
    • Bug fixes
      • PromQL: Do not escape HTML-like chars in query log #6834 #6795
      • React UI: Fix data table matrix values #6896
      • React UI: Fix new targets page not loading when using non-ASCII characters #6892
      • Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
      • Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
      • Scrape: Prevent removal of metric names upon relabeling #6891
      • Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
      • Scrape: Fix crash when reloads are separated by two scrape intervals #7011
  • Changes from 2.16.0
    • Features
      • React UI: Support local timezone on /graph #6692
      • PromQL: add absent_over_time query function #6490
      • Adding optional logging of queries to their own file #6520
    • Enhancements
      • React UI: Add support for rules page and 'Xs ago' duration displays #6503
      • React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
      • TSDB: Export metric for WAL write errors #6647
      • TSDB: Improve query performance for queries that only touch…
Record
SUSE-SU-2020:1972-1
Updated
2026-11-02
OSVSUSE-SU-2020:2606-1 No score

Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus to version 2.18.0 fixes the following issues:

  • Fixed some building issues (bsc#1175478)
  • prometheus components systemd units should depend on network target (bsc#1143913).

Update to 2.18.0

  • Features
    • Tracing: Added experimental Jaeger support #7148
  • Changes
    • Federation: Only use local TSDB for federation (ignore remote read). #7096
    • Rules: rule_evaluations_total and rule_evaluation_failures_total have a rule_group label now. #7094
  • Enhancements
    • TSDB: Significantly reduce WAL size kept around after a block cut. #7098
    • Discovery: Add architecture meta label for EC2. #7000
  • Bug fixes
    • UI: Fixed wrong MinTime reported by /status. #7182
    • React UI: Fixed multiselect legend on OSX. #6880
    • Remote Write: Fixed blocked resharding edge case. #7122
    • Remote Write: Fixed remote write not updating on relabel configs change. #7073
  • Changes from 2.17.2
    • Bug fixes
      • Federation: Register federation metrics #7081
      • PromQL: Fix panic in parser error handling #7132
      • Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
      • TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
      • TSDB: Make isolation more robust to panics in web handlers #7129 #7136
  • Changes from 2.17.1
    • Bug fixes
      • TSDB: Fix query performance regression that increased memory and CPU usage #7051
  • Changes from 2.17.0
    • Features
      • TSDB: Support isolation #6841
      • This release implements isolation in TSDB. API queries and recording rules are guaranteed to only see full scrapes and full recording rules. This comes with a certain overhead in resource usage. Depending on the situation, there might be some increase in memory usage, CPU usage, or query latency.
    • Enhancements
      • PromQL: Allow more keywords as metric names #6933
      • React UI: Add normalization of localhost URLs in targets page #6794
      • Remote read: Read from remote storage concurrently #6770
      • Rules: Mark deleted rule series as stale after a reload #6745
      • Scrape: Log scrape append failures as debug rather than warn #6852
      • TSDB: Improve query performance for queries that partially hit the head #6676
      • Consul SD: Expose service health as meta label #5313
      • EC2 SD: Expose EC2 instance lifecycle as meta label #6914
      • Kubernetes SD: Expose service type as meta label for K8s service role #6684
      • Kubernetes SD: Expose label_selector and field_selector #6807
      • Openstack SD: Expose hypervisor id as meta label #6962
    • Bug fixes
      • PromQL: Do not escape HTML-like chars in query log #6834 #6795
      • React UI: Fix data table matrix values #6896
      • React UI: Fix new targets page not loading when using non-ASCII characters #6892
      • Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
      • Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
      • Scrape: Prevent removal of metric names upon relabeling #6891
      • Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
      • Scrape: Fix crash when reloads are separated by two scrape intervals #7011
  • Changes from 2.16.0
    • Features
      • React UI: Support local timezone on /graph #6692
      • PromQL: add absent_over_time query function #6490
      • Adding optional logging of queries to their own file #6520
    • Enhancements
      • React UI: Add support for rules page and 'Xs ago' duration displays #6503
      • React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
      • TSDB: Export metric for WAL write errors #6647
      • TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
      • PromQL: Refactoring in parser errors to improve error messages #6634
      • PromQL: Support trailing commas in…
Record
SUSE-SU-2020:2606-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bootstrap-3-typeahead
npm
 Source text: > 4.0.2
Not evaluated
bassjobsen/bootstrap-3-typeahead
Packagist
 Source text: > 4.0.2
Not evaluated
cobbler
SUSE:HPE Helion OpenStack 8
From an advisory covering 4 CVEs
 before 2.6.6-49.26.3
2.6.6-49.26.3
golang-github-prometheus-node_exporter
SUSE:HPE Helion OpenStack 8
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
cobbler
SUSE:OpenStack Cloud 8
From an advisory covering 4 CVEs
 before 2.6.6-49.26.3
2.6.6-49.26.3
golang-github-prometheus-node_exporter
SUSE:OpenStack Cloud 8
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
cobbler
SUSE:OpenStack Cloud 9
From an advisory covering 4 CVEs
 before 2.6.6-49.26.3
2.6.6-49.26.3
golang-github-prometheus-node_exporter
SUSE:OpenStack Cloud 9
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-node_exporter
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-node_exporter
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
Show 52 moreShow less
Affected packages
PackageAffectedFixed
cobbler
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 2.6.6-49.26.3
2.6.6-49.26.3
golang-github-prometheus-node_exporter
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-prometheus
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 2.18.0-1.12.2
2.18.0-1.12.2
grafana
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 7.0.3-1.9.3
7.0.3-1.9.3
mgr-cfg
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.2-1.12.3
4.1.2-1.12.3
mgr-custom-info
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.1-1.6.1
4.1.1-1.6.1
mgr-daemon
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.1-1.14.2
4.1.1-1.14.2
mgr-osad
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.2-1.15.2
4.1.2-1.15.2
mgr-push
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.1-1.6.3
4.1.1-1.6.3
mgr-virtualization
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.1-1.14.3
4.1.1-1.14.3
rhnlib
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.2-21.22.2
4.1.2-21.22.2
spacecmd
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.4-38.61.2
4.1.4-38.61.2
spacewalk-client-tools
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.5-52.32.2
4.1.5-52.32.2
spacewalk-koan
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.1-24.12.2
4.1.1-24.12.2
spacewalk-oscap
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.1-19.12.1
4.1.1-19.12.1
spacewalk-remote-utils
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.1-24.15.3
4.1.1-24.15.3
supportutils-plugin-susemanager-client
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.2-6.15.1
4.1.2-6.15.1
suseRegisterInfo
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.2-25.9.2
4.1.2-25.9.2
uyuni-base
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.1-1.3.1
4.1.1-1.3.1
uyuni-common-libs
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 4.1.5-1.3.2
4.1.5-1.3.2
zypp-plugin-spacewalk
SUSE:Manager Client Tools 12
From an advisory covering 4 CVEs
 before 1.0.7-30.21.2
1.0.7-30.21.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 0.18.1-1.6.2
0.18.1-1.6.2
dracut-saltboot
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 0.1.1590413773.a959db7-1.12.2
0.1.1590413773.a959db7-1.12.2
golang-github-prometheus-prometheus
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 2.18.0-3.12.2
2.18.0-3.12.2
grafana
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 7.0.3-1.9.2
7.0.3-1.9.2
koan
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 2.9.0-4.15.2
2.9.0-4.15.2
mgr-cfg
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.2-1.12.4
4.1.2-1.12.4
mgr-custom-info
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.1-1.6.2
4.1.1-1.6.2
mgr-daemon
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.1-1.14.2
4.1.1-1.14.2
mgr-osad
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.2-1.15.2
4.1.2-1.15.2
mgr-push
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.1-1.6.4
4.1.1-1.6.4
mgr-virtualization
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.1-1.14.2
4.1.1-1.14.2
rhnlib
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.2-3.16.2
4.1.2-3.16.2
spacecmd
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.4-3.38.2
4.1.4-3.38.2
spacewalk-client-tools
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.5-3.23.2
4.1.5-3.23.2
spacewalk-koan
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.1-3.9.2
4.1.1-3.9.2
spacewalk-oscap
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.1-3.6.3
4.1.1-3.6.3
spacewalk-remote-utils
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.1-3.12.4
4.1.1-3.12.4
supportutils-plugin-susemanager-client
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.2-3.9.2
4.1.2-3.9.2
suseRegisterInfo
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.2-3.6.2
4.1.2-3.6.2
uyuni-base
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.1-1.3.2
4.1.1-1.3.2
uyuni-common-libs
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 4.1.5-1.3.2
4.1.5-1.3.2
zypp-plugin-spacewalk
SUSE:Manager Client Tools 15
From an advisory covering 4 CVEs
 before 1.0.7-3.12.2
1.0.7-3.12.2
golang-github-prometheus-prometheus
SUSE:Enterprise Storage 6
 before 2.18.0-3.3.1
2.18.0-3.3.1
dracut-saltboot
openSUSE:Leap 15.2
From an advisory covering 4 CVEs
 before 0.1.1590413773.a959db7-lp152.2.3.1
0.1.1590413773.a959db7-lp152.2.3.1
golang-github-prometheus-prometheus
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.27.1-4.2
2.27.1-4.2

Not evaluated means the source gave git commits or a range we can't read, so we can't tell which releases are affected. A fixed version beside it is the source’s own claim.

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-10215 is a medium vulnerability (CVSS 6.1) in Bootstrap-3-typeahead Project Bootstrap-3-typeahead, published October 8, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. Fixed in golang-github-prometheus-prometheus 2.18.0-3.3.1.

References

Show 49 moreShow less
This page doesn't list everything

Left out here: the rest of 6 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open