golang-github-QubitProducts-exporter_exporter vulnerabilities (SUSE)
99 vulnerabilities.
golang-github-QubitProducts-exporter_exporterSUSEInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 Mediumgolang-github-QubitProducts-exporter_exporterSUSEInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumgolang-github-QubitProducts-exporter_exporterSUSEInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumgolang-github-QubitProducts-exporter_exporterSUSEInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumgolang-github-QubitProducts-exporter_exporterSUSEInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 Mediumgolang-github-QubitProducts-exporter_exporterSUSEIDOR in Annotations API allows unprivileged users to DELETE annotation4.3 Mediumgolang-github-QubitProducts-exporter_exporterSUSEGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro6.5 Mediumgolang-github-QubitProducts-exporter_exporterSUSEGrafana plugin resources can lead to unbounded memory allocation6.5 Mediumgolang-github-QubitProducts-exporter_exporterSUSEAuth Proxy IPv6 whitelist bypass7.4 Highgolang-github-QubitProducts-exporter_exporterSUSESQL Expressions Read File From Disk6.3 Mediumgolang-github-QubitProducts-exporter_exporterSUSEBAC in Snapshot API allows deletion of unauthorized dashboard snapshots6.5 Mediumgolang-github-QubitProducts-exporter_exporterSUSEUsers can generate Service Account tokens after permissions removal5.9 Mediumgolang-github-QubitProducts-exporter_exporterSUSEDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin7.1 Highgolang-github-QubitProducts-exporter_exporterSUSEGrafana Live push endpoint allows unbounded memory allocation leading to OOM6.5 Mediumgolang-github-QubitProducts-exporter_exporterSUSEViewer-triggered race condition in Grafana Live leads to complete server crash6.5 Mediumgolang-github-QubitProducts-exporter_exporterSUSEPrometheus: remote read endpoint allows denial of service via crafted snappy payload7.5 Highgolang-github-QubitProducts-exporter_exporterSUSEPrometheus Azure AD remote write OAuth client secret exposed via config API7.5 Highgolang-github-QubitProducts-exporter_exporterSUSEApache Thrift: Go TFramedTransport uint32 overflow7.5 Highgolang-github-QubitProducts-exporter_exporterSUSEPrometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer5.3 Mediumgolang-github-QubitProducts-exporter_exporterSUSEGo JOSE affect by a panic in JWE decryption7.5 Highgolang-github-QubitProducts-exporter_exporterSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highgolang-github-QubitProducts-exporter_exporterSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumgolang-github-QubitProducts-exporter_exporterSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticalgolang-github-QubitProducts-exporter_exporterSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalgolang-github-QubitProducts-exporter_exporterSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticalgolang-github-QubitProducts-exporter_exporterSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highgolang-github-QubitProducts-exporter_exporterSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highgolang-github-QubitProducts-exporter_exporterSUSEPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumgolang-github-QubitProducts-exporter_exporterSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highgolang-github-QubitProducts-exporter_exporterSUSETornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters7.5 Highgolang-github-QubitProducts-exporter_exporterSUSETornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing7.5 Highgolang-github-QubitProducts-exporter_exporterSUSETornado vulnerable to Header Injection and XSS via reason argument5.4 Mediumgolang-github-QubitProducts-exporter_exporterSUSESalt Master authentication protocol downgrade may enable minion impersonation7.5 Highgolang-github-QubitProducts-exporter_exporterSUSESalt junos module uses an unsafe YAML loader which may allow unintended code execution7.3 Highgolang-github-QubitProducts-exporter_exporterSUSECVE-2025-128168.6 Highgolang-github-QubitProducts-exporter_exporterSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumgolang-github-QubitProducts-exporter_exporterSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Mediumgolang-github-QubitProducts-exporter_exporterSUSEGNU elfutils eu-readelf readelf.c process_symtab buffer overflow4.8 Mediumgolang-github-QubitProducts-exporter_exporterSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highgolang-github-QubitProducts-exporter_exporterSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highgolang-github-QubitProducts-exporter_exporterSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumgolang-github-QubitProducts-exporter_exporterSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalgolang-github-QubitProducts-exporter_exporterSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumgolang-github-QubitProducts-exporter_exporterSUSEGrafana Missing Synchronization vulnerability7.5 Highgolang-github-QubitProducts-exporter_exporterSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumgolang-github-QubitProducts-exporter_exporterSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumgolang-github-QubitProducts-exporter_exporterSUSEGrafana vulnerable to Cross-site Scripting7.3 Highgolang-github-QubitProducts-exporter_exporterSUSEGrafana vulnerable to Cross-site Scripting7.3 Highgolang-github-QubitProducts-exporter_exporterSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgolang-github-QubitProducts-exporter_exporterSUSEGrafana stored XSS in FileUploader component7.3 High- Show moreLoading…