golang-github-prometheus-alertmanager vulnerabilities (openSUSE)
18 vulnerabilities.
-
golang-github-prometheus-alertmanageropenSUSE Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
golang-github-prometheus-alertmanageropenSUSE gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
golang-github-prometheus-alertmanageropenSUSE Heap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak 6.9 Medium -
golang-github-prometheus-alertmanageropenSUSE jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions 9.2 Critical -
golang-github-prometheus-alertmanageropenSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
golang-github-prometheus-alertmanageropenSUSE JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js 9.8 Critical -
golang-github-prometheus-alertmanageropenSUSE Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
golang-github-prometheus-alertmanageropenSUSE CVE-2025-12816 8.6 High -
golang-github-prometheus-alertmanageropenSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
golang-github-prometheus-alertmanageropenSUSE Denial of service via malicious preflight requests in github.com/rs/cors 7.5 High -
golang-github-prometheus-alertmanageropenSUSE HTTP/2 CONTINUATION flood in net/http 7.5 High -
golang-github-prometheus-alertmanageropenSUSE Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint 7.5 High -
golang-github-prometheus-alertmanageropenSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
golang-github-prometheus-alertmanageropenSUSE Prometheus Exporter Toolkit vulnerable to basic authentication bypass 6.2 Medium -
golang-github-prometheus-alertmanageropenSUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
golang-github-prometheus-alertmanageropenSUSE golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
golang-github-prometheus-alertmanageropenSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
golang-github-prometheus-alertmanageropenSUSE Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical