golang-github-prometheus-prometheus vulnerabilities (SUSE)
187 vulnerabilities.
golang-github-prometheus-prometheusSUSESalt junos module uses an unsafe YAML loader which may allow unintended code execution7.3 Highgolang-github-prometheus-prometheusSUSECVE-2025-128168.6 Highgolang-github-prometheus-prometheusSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumgolang-github-prometheus-prometheusSUSESensitive headers not cleared on cross-origin redirect in net/http6.8 Mediumgolang-github-prometheus-prometheusSUSEGrafana's datasource proxy API allows authorization checks to be bypassed5.0 Mediumgolang-github-prometheus-prometheusSUSEThe built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor...6.8 Mediumgolang-github-prometheus-prometheusSUSEIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 Mediumgolang-github-prometheus-prometheusSUSEgo-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment3.7 Lowgolang-github-prometheus-prometheusSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Mediumgolang-github-prometheus-prometheusSUSESecurity update for SUSE Manager Client ToolsNo scoregolang-github-prometheus-prometheusSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 Criticalgolang-github-prometheus-prometheusSUSEDatabase password leaked by systemd uyuni-server-attestation service5.7 Mediumgolang-github-prometheus-prometheusSUSEPrivilege escalation vulnerability for Organizations in Grafana5.1 Mediumgolang-github-prometheus-prometheusSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 Lowgolang-github-prometheus-prometheusSUSEGrafana SQL Expressions allow for remote code execution9.4 Criticalgolang-github-prometheus-prometheusSUSEGrafana alerting wrong permission on datasource rule write endpoint5.1 Mediumgolang-github-prometheus-prometheusSUSEgo-retryablehttp can leak basic auth credentials to log files6.0 Mediumgolang-github-prometheus-prometheusSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highgolang-github-prometheus-prometheusSUSEIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 Mediumgolang-github-prometheus-prometheusSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumgolang-github-prometheus-prometheusSUSEJinja vulnerable to Cross-Site Scripting (XSS)5.4 Mediumgolang-github-prometheus-prometheusSUSEOpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics7.5 Highgolang-github-prometheus-prometheusSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highgolang-github-prometheus-prometheusSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumgolang-github-prometheus-prometheusSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalgolang-github-prometheus-prometheusSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumgolang-github-prometheus-prometheusSUSEGrafana Missing Synchronization vulnerability7.5 Highgolang-github-prometheus-prometheusSUSESecurity update for golang-github-prometheus-prometheusNo scoregolang-github-prometheus-prometheusSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumgolang-github-prometheus-prometheusSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumgolang-github-prometheus-prometheusSUSEGrafana vulnerable to Cross-site Scripting7.3 Highgolang-github-prometheus-prometheusSUSEGrafana vulnerable to Cross-site Scripting7.3 Highgolang-github-prometheus-prometheusSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgolang-github-prometheus-prometheusSUSEGrafana stored XSS in FileUploader component7.3 Highgolang-github-prometheus-prometheusSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumgolang-github-prometheus-prometheusSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumgolang-github-prometheus-prometheusSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumgolang-github-prometheus-prometheusSUSEGrafana contains Improper Input Validation6.4 Mediumgolang-github-prometheus-prometheusSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumgolang-github-prometheus-prometheusSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumgolang-github-prometheus-prometheusSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumgolang-github-prometheus-prometheusSUSEGrafana plugin signature bypass vulnerability6.1 Mediumgolang-github-prometheus-prometheusSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highgolang-github-prometheus-prometheusSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-github-prometheus-prometheusSUSEGrafana folders admin only permission privilege escalation7.6 Highgolang-github-prometheus-prometheusSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumgolang-github-prometheus-prometheusSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highgolang-github-prometheus-prometheusSUSEGrafana account takeover via OAuth vulnerability7.1 Highgolang-github-prometheus-prometheusSUSEStored XSS in Grafana's Unified Alerting7.3 Highgolang-github-prometheus-prometheusSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Medium- Show moreLoading…