golang-github-prometheus-alertmanager vulnerabilities (SUSE)
103 vulnerabilities.
-
golang-github-prometheus-alertmanagerSUSE Denial of service via unbounded request body size 7.5 High -
golang-github-prometheus-alertmanagerSUSE brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups 7.7 High -
golang-github-prometheus-alertmanagerSUSE React Router has stored XSS via unescaped Location header in prerendered redirect HTML 5.4 Medium -
golang-github-prometheus-alertmanagerSUSE Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
golang-github-prometheus-alertmanagerSUSE Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
golang-github-prometheus-alertmanagerSUSE Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
golang-github-prometheus-alertmanagerSUSE Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
golang-github-prometheus-alertmanagerSUSE Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
golang-github-prometheus-alertmanagerSUSE IDOR in Annotations API allows unprivileged users to DELETE annotation 4.3 Medium -
golang-github-prometheus-alertmanagerSUSE Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro 6.5 Medium -
golang-github-prometheus-alertmanagerSUSE Grafana plugin resources can lead to unbounded memory allocation 6.5 Medium -
golang-github-prometheus-alertmanagerSUSE Auth Proxy IPv6 whitelist bypass 7.4 High -
golang-github-prometheus-alertmanagerSUSE SQL Expressions Read File From Disk 6.3 Medium -
golang-github-prometheus-alertmanagerSUSE BAC in Snapshot API allows deletion of unauthorized dashboard snapshots 6.5 Medium -
golang-github-prometheus-alertmanagerSUSE Users can generate Service Account tokens after permissions removal 5.9 Medium -
golang-github-prometheus-alertmanagerSUSE Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin 7.1 High -
golang-github-prometheus-alertmanagerSUSE Grafana Live push endpoint allows unbounded memory allocation leading to OOM 6.5 Medium -
golang-github-prometheus-alertmanagerSUSE Viewer-triggered race condition in Grafana Live leads to complete server crash 6.5 Medium -
golang-github-prometheus-alertmanagerSUSE Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
golang-github-prometheus-alertmanagerSUSE Prometheus: remote read endpoint allows denial of service via crafted snappy payload 7.5 High -
golang-github-prometheus-alertmanagerSUSE Prometheus Azure AD remote write OAuth client secret exposed via config API 7.5 High -
golang-github-prometheus-alertmanagerSUSE Apache Thrift: C++ JSON OOB read 6.5 Medium -
golang-github-prometheus-alertmanagerSUSE Apache Thrift: Go TFramedTransport uint32 overflow 7.5 High -
golang-github-prometheus-alertmanagerSUSE Grafana Alerting Editors can edit destination of webhooks they did not create 1.3 Low -
golang-github-prometheus-alertmanagerSUSE Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer 5.3 Medium -
golang-github-prometheus-alertmanagerSUSE OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies 5.3 Medium -
golang-github-prometheus-alertmanagerSUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
golang-github-prometheus-alertmanagerSUSE Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
golang-github-prometheus-alertmanagerSUSE Public Dashboards time range restriction on annotations can be bypassed 5.3 Medium -
golang-github-prometheus-alertmanagerSUSE jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions 9.2 Critical -
golang-github-prometheus-alertmanagerSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
golang-github-prometheus-alertmanagerSUSE JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js 9.8 Critical -
golang-github-prometheus-alertmanagerSUSE Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
golang-github-prometheus-alertmanagerSUSE Expr has Denial of Service via Unbounded Recursion in Builtin Functions 7.5 High -
golang-github-prometheus-alertmanagerSUSE Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
golang-github-prometheus-alertmanagerSUSE Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
golang-github-prometheus-alertmanagerSUSE Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
golang-github-prometheus-alertmanagerSUSE Salt Master authentication protocol downgrade may enable minion impersonation 7.5 High -
golang-github-prometheus-alertmanagerSUSE Salt junos module uses an unsafe YAML loader which may allow unintended code execution 7.3 High -
golang-github-prometheus-alertmanagerSUSE CVE-2025-12816 8.6 High -
golang-github-prometheus-alertmanagerSUSE Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
golang-github-prometheus-alertmanagerSUSE An open redirect vulnerability has been identified in Grafana OSS organization switching... 4.2 Medium -
golang-github-prometheus-alertmanagerSUSE Grafana is vulnerable to XSS attacks through open redirects and path traversal 7.6 High -
golang-github-prometheus-alertmanagerSUSE Grafana's insecure DingDing Alert integration exposes sensitive information 4.3 Medium -
golang-github-prometheus-alertmanagerSUSE Grafana's datasource proxy API allows authorization checks to be bypassed 5.0 Medium -
golang-github-prometheus-alertmanagerSUSE The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor... 6.8 Medium -
golang-github-prometheus-alertmanagerSUSE Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
golang-github-prometheus-alertmanagerSUSE go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment 3.7 Low -
golang-github-prometheus-alertmanagerSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
golang-github-prometheus-alertmanagerSUSE Privilege escalation vulnerability for Organizations in Grafana 5.1 Medium - Show olderLoading…