Known vulnerabilities in golang-github-prometheus-promu (Red Hat package) - page 2

Vendor: Red Hat Inc.

Software: golang-github-prometheus-promu (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:golang-github-prometheus-promu_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 47

Public exploits: 3

Known exploited (KEV): 1

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (47)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU87538 - Resource exhaustion CVE-2024-28180	CWE-400	Medium	No	No	0.15.0-15.3.gitd5383c5.el8	14.03.2024	SB2024031446 SB2024031447 SB2024031448 and 106 more
#VU82923 - Allocation of Resources Without Limits or Throttling CVE-2023-3153	CWE-770	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	08.11.2023	SB2023110861 SB2023110864 SB2023110866 and 2 more
#VU82064 - Resource exhaustion CVE-2023-39325	CWE-400	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	16.10.2023	SB2023101651 SB2023101652 SB2023101653 and 341 more
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Available	Exploited	0.15.0-15.1.gitd5383c5.el8	10.10.2023	SB2023101023 SB2023101024 SB2023101037 and 650 more
#VU81426 - Resource exhaustion CVE-2023-37788	CWE-400	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	03.10.2023	SB2023100334 SB2023100335 SB2023100512 and 11 more
#VU80575 - Improper input validation CVE-2023-39322	CWE-20	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	08.09.2023	SB2023090845 SB2023091875 SB2023091876 and 51 more
#VU80574 - Improper input validation CVE-2023-39321	CWE-20	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	08.09.2023	SB2023090845 SB2023091875 SB2023091876 and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-39319	CWE-79	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	08.09.2023	SB2023090845 SB2023091146 SB2023091875 and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-39318	CWE-79	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	08.09.2023	SB2023090845 SB2023091146 SB2023091875 and 61 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-3978	CWE-79	Low	No	No	0.15.0-15.1.gitd5383c5.el8	09.08.2023	SB2023080938 SB2023081013 SB20230821167 and 54 more
#VU78290 - Use After Free CVE-2023-29824	CWE-416	Low	No	No	0.15.0-15.1.gitd5383c5.el8	16.07.2023	SB2023071614 SB2023071617 SB2023072554 and 6 more
#VU78005 - Inadequate Encryption Strength CVE-2023-3089	CWE-326	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	06.07.2023	SB2023070602 SB2023070603 SB2023070604 and 34 more
#VU67396 - Improper input validation CVE-2022-27664	CWE-20	Medium	No	No	0.15.0-15.1.gitd5383c5.el8	15.09.2022	SB2022091520 SB2022091521 SB2022092144 and 127 more
#VU56829 - Improper input validation CVE-2021-29923	CWE-20	Medium	No	No	0.5.0-5.git642a960.el8	22.09.2021	SB2021092225 SB2021092226 SB2021100408 and 37 more
#VU56024 - Resource Management Errors CVE-2021-33198	CWE-399	Medium	No	No	0.5.0-4.git642a960.el8	22.08.2021	SB2021070405 SB2021082204 SB2021083116 and 46 more
#VU56023 - Missing Authorization CVE-2021-33197	CWE-862	Medium	No	No	0.5.0-4.git642a960.el8	22.08.2021	SB2021070405 SB2021082204 SB2021083116 and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-33195	CWE-79	Medium	No	No	0.5.0-4.git642a960.el8	22.08.2021	SB2021070405 SB2021082204 SB2021083116 and 38 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-36221	CWE-362	Medium	No	No	0.5.0-5.git642a960.el8	10.08.2021	SB2021081001 SB2021081217 SB2021081219 and 32 more
#VU55665 - Improper Certificate Validation CVE-2021-34558	CWE-295	Medium	Available	No	0.5.0-4.git642a960.el8	09.08.2021	SB2021080909 SB2021080912 SB2021081122 and 65 more
#VU54910 - Uncontrolled Recursion CVE-2021-31525	CWE-674	Medium	No	No	0.5.0-4.git642a960.el8	15.07.2021	SB2021071514 SB2021052725 SB2021071515 and 39 more

Showing elements 21 - 40 out of 47

Known vulnerabilities in golang-github-prometheus-promu (Red Hat package) - page 2

Breakdown by Severity Chart

Vulnerabilities (47)

Please verify you're human