Known vulnerabilities in golang-github-prometheus-alertmanager-debuginfo

Known vulnerabilities in golang-github-prometheus-alertmanager-debuginfo

Vendor: SUSE

Software: golang-github-prometheus-alertmanager-debuginfo

Software CPE: cpe:2.3:o:suse:golang-github-prometheus-alertmanager-debuginfo:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 19

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU128147 - Resource exhaustion CVE-2026-31958	CWE-400	Medium	No	No	0.28.1-160002.1.1	27.04.2026	SB20260427102 SB20260427109 SB20260427110 and 40 more
#VU124876 - Inefficient Regular Expression Complexity CVE-2026-25547	CWE-1333	Low	No	No	0.28.1-159000.12.2.1	06.04.2026	SB2026040628 SB2026040631 SB2026040632 and 13 more
#VU123311 - Improper Control of Generation of Code ('Code Injection') CVE-2026-1615	CWE-94	High	No	No	0.28.1-159000.12.2.1	27.02.2026	SB2026022707 SB2026022708 SB2026032720 and 4 more
#VU123310 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-61140	CWE-1321	High	No	No	0.28.1-159000.12.2.1	27.02.2026	SB2026022706 SB2026022708 SB2026030405 and 3 more
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-27606	CWE-22	High	Available	No	0.28.1-159000.12.2.1	24.02.2026	SB2026022445 SB2026040631 SB2026040632 and 2 more
#VU122756 - Improper Access Control CVE-2026-21722	CWE-284	Low	No	No	0.28.1-159000.12.2.1	12.02.2026	SB2026021238 SB20260325198 SB2026040631 and 1 more
#VU120232 - Uncontrolled Recursion CVE-2025-68156	CWE-674	Medium	No	No	0.28.1-120002.4.6.1, 0.28.1-150002.4.6.1	22.12.2025	SB2025122249 SB2025122250 SB2025122251 and 12 more
#VU120229 - Improper Authentication CVE-2025-62349	CWE-287	Low	No	No	0.28.1-159000.12.2.1	19.12.2025	SB2025121950 SB2025121951 SB2025121952 and 32 more
#VU120228 - Improper Control of Generation of Code ('Code Injection') CVE-2025-62348	CWE-94	Medium	No	No	0.28.1-159000.12.2.1	19.12.2025	SB2025121950 SB2025121951 SB2025121952 and 32 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2025-67724	CWE-644	Low	No	No	0.28.1-159000.12.2.1	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 35 more
#VU119884 - Excessive Iteration CVE-2025-67725	CWE-834	Low	No	No	0.28.1-159000.12.2.1	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 41 more
#VU119883 - Excessive Iteration CVE-2025-67726	CWE-834	Medium	No	No	0.28.1-159000.12.2.1	12.12.2025	SB2025121205 SB2025123045 SB2026010587 and 41 more
#VU119131 - Interpretation Conflict CVE-2025-12816	CWE-436	Medium	No	No	0.28.1-120002.4.6.1, 0.28.1-150002.4.6.1	04.12.2025	SB2025120419 SB2025122219 SB20260116128 and 19 more
#VU118722 - Allocation of Resources Without Limits or Throttling CVE-2025-47908	CWE-770	Medium	No	No	0.28.1-120002.4.3.2, 0.28.1-150002.4.3.3, 0.28.1-150100.4.28.2	24.11.2025	SB2025112452 SB2025112453 SB2025112454 and 2 more
#VU113081 - Exposure of sensitive information to an unauthorized actor CVE-2025-3415	CWE-200	Medium	No	No	0.28.1-120002.4.3.2, 0.28.1-150002.4.3.3, 0.28.1-159000.12.2.1	21.07.2025	SB2025072113 SB2025112453 SB2025112454 and 3 more
#VU113080 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-6197	CWE-601	Low	No	No	0.28.1-120002.4.3.2, 0.28.1-150002.4.3.3	21.07.2025	SB2025072114 SB2025112453 SB2025112454
#VU113079 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-6023	CWE-601	Medium	No	No	0.28.1-120002.4.3.2, 0.28.1-150002.4.3.3	21.07.2025	SB2025072114 SB2025112453 SB2025112454
#VU106253 - Improper input validation CVE-2025-22870	CWE-20	Medium	Available	No	0.26.0-150100.4.25.2	30.03.2025	SB2025033001 SB2025033002 SB2025033003 and 106 more
#VU88184 - Resource exhaustion CVE-2023-45288	CWE-400	Medium	Available	No	0.26.0-150100.4.25.2	05.04.2024	SB2024040533 SB2024040549 SB2024040551 and 189 more