prometheus vulnerabilities (Azure Linux)
16 vulnerabilities.
-
prometheusAzure Linux Logrus is vulnerable to DoS when using Entry.Writer() 7.5 High -
prometheusAzure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
prometheusAzure Linux jwt-go allows excessive memory allocation during header parsing 7.5 High -
prometheusAzure Linux HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
prometheusAzure Linux Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
prometheusAzure Linux Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
prometheusAzure Linux go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
prometheusAzure Linux Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability 5.5 Medium -
prometheusAzure Linux HTTP/2 CONTINUATION flood in net/http 7.5 High -
prometheusAzure Linux Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
prometheusAzure Linux OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics 7.5 High -
prometheusAzure Linux HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
prometheusAzure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
prometheusAzure Linux Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
prometheusAzure Linux golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
prometheusAzure Linux Arbitrary redirects under /new endpoint 6.5 Medium