golang-github-prometheus-promu vulnerabilities (openSUSE)
47 vulnerabilities.
golang-github-prometheus-promuopenSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highgolang-github-prometheus-promuopenSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumgolang-github-prometheus-promuopenSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticalgolang-github-prometheus-promuopenSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalgolang-github-prometheus-promuopenSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticalgolang-github-prometheus-promuopenSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highgolang-github-prometheus-promuopenSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highgolang-github-prometheus-promuopenSUSEPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumgolang-github-prometheus-promuopenSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highgolang-github-prometheus-promuopenSUSECVE-2025-128168.6 Highgolang-github-prometheus-promuopenSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumgolang-github-prometheus-promuopenSUSESecurity update for SUSE Manager Client ToolsNo scoregolang-github-prometheus-promuopenSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 Criticalgolang-github-prometheus-promuopenSUSEDatabase password leaked by systemd uyuni-server-attestation service5.7 Mediumgolang-github-prometheus-promuopenSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 Lowgolang-github-prometheus-promuopenSUSEGrafana alerting wrong permission on datasource rule write endpoint5.1 Mediumgolang-github-prometheus-promuopenSUSEUsers outside an organization can delete a snapshot with its key6.5 Mediumgolang-github-prometheus-promuopenSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Mediumgolang-github-prometheus-promuopenSUSEAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Mediumgolang-github-prometheus-promuopenSUSEAnsible: template injection7.1 Highgolang-github-prometheus-promuopenSUSEImproper rendering of text nodes in golang.org/x/net/html6.1 Mediumgolang-github-prometheus-promuopenSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalgolang-github-prometheus-promuopenSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumgolang-github-prometheus-promuopenSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-github-prometheus-promuopenSUSEGrafana folders admin only permission privilege escalation7.6 Highgolang-github-prometheus-promuopenSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumgolang-github-prometheus-promuopenSUSEGrafana account takeover via OAuth vulnerability7.1 Highgolang-github-prometheus-promuopenSUSEStored XSS in Grafana's Unified Alerting7.3 Highgolang-github-prometheus-promuopenSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumgolang-github-prometheus-promuopenSUSEGrafana directory traversal for `.cvs` files4.3 Mediumgolang-github-prometheus-promuopenSUSEDirectory Traversal in Grafana4.3 Mediumgolang-github-prometheus-promuopenSUSEGrafana path traversal7.5 Highgolang-github-prometheus-promuopenSUSECross organization admin control in Grafana9.1 Criticalgolang-github-prometheus-promuopenSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumgolang-github-prometheus-promuopenSUSESM2 Decryption Buffer Overflow9.8 Criticalgolang-github-prometheus-promuopenSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 Highgolang-github-prometheus-promuopenSUSEInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Mediumgolang-github-prometheus-promuopenSUSEImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 Mediumgolang-github-prometheus-promuopenSUSEImproper Verification of Cryptographic Signature in ansible7.1 Highgolang-github-prometheus-promuopenSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Mediumgolang-github-prometheus-promuopenSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Mediumgolang-github-prometheus-promuopenSUSEAnsible Improper Input Validation vulnerability7.8 Highgolang-github-prometheus-promuopenSUSEAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 Mediumgolang-github-prometheus-promuopenSUSEAnsible fails to properly sanitize fact variables sent from the Ansible controller7.6 Highgolang-github-prometheus-promuopenSUSEAnsible Insertion of Sensitive Information into Log File vulnerability9.8 Criticalgolang-github-prometheus-promuopenSUSEImproper Input Validation in ansible2.2 Lowgolang-github-prometheus-promuopenSUSEAnsible apt_key module does not properly verify key fingerprint6.3 Medium