golang-github-QubitProducts-exporter_exporter vulnerabilities (openSUSE)
23 vulnerabilities.
golang-github-QubitProducts-exporter_exporteropenSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highgolang-github-QubitProducts-exporter_exporteropenSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticalgolang-github-QubitProducts-exporter_exporteropenSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalgolang-github-QubitProducts-exporter_exporteropenSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticalgolang-github-QubitProducts-exporter_exporteropenSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highgolang-github-QubitProducts-exporter_exporteropenSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highgolang-github-QubitProducts-exporter_exporteropenSUSEPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highgolang-github-QubitProducts-exporter_exporteropenSUSECVE-2025-128168.6 Highgolang-github-QubitProducts-exporter_exporteropenSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgolang-github-QubitProducts-exporter_exporteropenSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highgolang-github-QubitProducts-exporter_exporteropenSUSEUncontrolled Resource Consumption in promhttp7.5 Highgolang-github-QubitProducts-exporter_exporteropenSUSEAnsible discloses sensitive information in traceback error message5.5 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSEImproper Input Validation and Command Injection in Ansible7.1 Highgolang-github-QubitProducts-exporter_exporteropenSUSEA flaw was found in several ansible modules, where parameters containing credentials, such as...5.5 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSEAnsible Exposes Sensitive Information7.5 Highgolang-github-QubitProducts-exporter_exporteropenSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumgolang-github-QubitProducts-exporter_exporteropenSUSEInsertion of Sensitive Information into Log File in ansible5.5 Medium