golang-github-prometheus-promu vulnerabilities (SUSE)
83 vulnerabilities.
golang-github-prometheus-promuSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highgolang-github-prometheus-promuSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumgolang-github-prometheus-promuSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticalgolang-github-prometheus-promuSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalgolang-github-prometheus-promuSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticalgolang-github-prometheus-promuSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highgolang-github-prometheus-promuSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highgolang-github-prometheus-promuSUSEPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumgolang-github-prometheus-promuSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highgolang-github-prometheus-promuSUSETornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters7.5 Highgolang-github-prometheus-promuSUSETornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing7.5 Highgolang-github-prometheus-promuSUSETornado vulnerable to Header Injection and XSS via reason argument5.4 Mediumgolang-github-prometheus-promuSUSECVE-2025-128168.6 Highgolang-github-prometheus-promuSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumgolang-github-prometheus-promuSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Mediumgolang-github-prometheus-promuSUSEGNU elfutils eu-readelf readelf.c process_symtab buffer overflow4.8 Mediumgolang-github-prometheus-promuSUSESecurity update for SUSE Manager Client ToolsNo scoregolang-github-prometheus-promuSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 Criticalgolang-github-prometheus-promuSUSEDatabase password leaked by systemd uyuni-server-attestation service5.7 Mediumgolang-github-prometheus-promuSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 Lowgolang-github-prometheus-promuSUSEGrafana alerting wrong permission on datasource rule write endpoint5.1 Mediumgolang-github-prometheus-promuSUSEHTTP/2 CONTINUATION flood in net/http7.5 Highgolang-github-prometheus-promuSUSEUsers outside an organization can delete a snapshot with its key6.5 Mediumgolang-github-prometheus-promuSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumgolang-github-prometheus-promuSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Mediumgolang-github-prometheus-promuSUSEAnsible: template injection7.1 Highgolang-github-prometheus-promuSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highgolang-github-prometheus-promuSUSEImproper rendering of text nodes in golang.org/x/net/html6.1 Mediumgolang-github-prometheus-promuSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalgolang-github-prometheus-promuSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumgolang-github-prometheus-promuSUSEGrafana Missing Synchronization vulnerability7.5 Highgolang-github-prometheus-promuSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumgolang-github-prometheus-promuSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumgolang-github-prometheus-promuSUSEGrafana vulnerable to Cross-site Scripting7.3 Highgolang-github-prometheus-promuSUSEGrafana vulnerable to Cross-site Scripting7.3 Highgolang-github-prometheus-promuSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgolang-github-prometheus-promuSUSEGrafana stored XSS in FileUploader component7.3 Highgolang-github-prometheus-promuSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumgolang-github-prometheus-promuSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumgolang-github-prometheus-promuSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumgolang-github-prometheus-promuSUSEGrafana contains Improper Input Validation6.4 Mediumgolang-github-prometheus-promuSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumgolang-github-prometheus-promuSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumgolang-github-prometheus-promuSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumgolang-github-prometheus-promuSUSEGrafana plugin signature bypass vulnerability6.1 Mediumgolang-github-prometheus-promuSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highgolang-github-prometheus-promuSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-github-prometheus-promuSUSEGrafana folders admin only permission privilege escalation7.6 Highgolang-github-prometheus-promuSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumgolang-github-prometheus-promuSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 High- Show olderLoading…