Known vulnerabilities in golang-github-prometheus-promu

Vendor: SUSE
Software: golang-github-prometheus-promu
Software CPE: cpe:2.3:o:suse:golang-github-prometheus-promu:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 81
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting golang-github-prometheus-promu golang-github-prometheus-promu is affected by 81 known vulnerabilities: 9 high, 35 medium, 37 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124876 - Inefficient Regular Expression Complexity
CVE-2026-25547		 CWE-1333 Low
No
No
 0.17.0-150000.3.30.1 06.04.2026 SB2026040628
SB2026040631
SB2026040632
and 13 more
#VU123311 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-1615		 CWE-94 High
No
No
 0.17.0-150000.3.30.1 27.02.2026 SB2026022707
SB2026022708
SB2026032720
and 4 more
#VU123310 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-61140		 CWE-1321 High
No
No
 0.17.0-150000.3.30.1 27.02.2026 SB2026022706
SB2026022708
SB2026030405
and 3 more
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-27606		 CWE-22 High
Available
No
 0.17.0-150000.3.30.1 24.02.2026 SB2026022445
SB2026040631
SB2026040632
and 4 more
#VU122756 - Improper Access Control
CVE-2026-21722		 CWE-284 Low
No
No
 0.17.0-150000.3.30.1 12.02.2026 SB2026021238
SB20260325198
SB2026040631
and 1 more
#VU122160 - Resource Management Errors
CVE-2026-21720		 CWE-399 Medium
No
No
 0.17.0-150000.3.30.1 30.01.2026 SB2026013061
SB20260325198
SB2026040631
#VU122159 - Improper Privilege Management
CVE-2026-21721		 CWE-269 Low
Available
No
 0.17.0-150000.3.30.1 30.01.2026 SB2026013061
SB2026022335
SB2026030249
and 4 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 0.17.0-150000.3.30.1 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 71 more
#VU120232 - Uncontrolled Recursion
CVE-2025-68156		 CWE-674 Medium
No
No
 0.17.0-150000.3.30.1 22.12.2025 SB2025122249
SB2025122250
SB2025122251
and 12 more
#VU119131 - Interpretation Conflict
CVE-2025-12816		 CWE-436 Medium
No
No
 0.17.0-150000.3.30.1 04.12.2025 SB2025120419
SB2025122219
SB20260116128
and 19 more
#VU113081 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3415		 CWE-200 Medium
No
No
 0.17.0-150000.3.30.1 21.07.2025 SB2025072113
SB2025112453
SB2025112454
and 3 more
#VU106004 - Memory corruption
CVE-2025-1365		 CWE-119 Medium
No
No
 0.17.0-1.30.2 25.03.2025 SB2025032513
SB2025032515
SB2025032519
and 2 more
#VU104016 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22037		 CWE-200 Low
No
No
 0.17.0-1.24.1, 0.17.0-150000.3.24.1 17.02.2025 SB2025021737
SB2025021738
SB2025021739
and 5 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 0.17.0-1.24.1, 0.17.0-150000.3.24.1 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Available
No
 0.17.0-1.24.1, 0.17.0-150000.3.24.1 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU99259 - Improper Access Control
CVE-2024-8118		 CWE-284 Low
No
No
 0.17.0-1.24.1, 0.17.0-150000.3.24.1 22.10.2024 SB20241022375
SB2025021467
SB2025021742
and 1 more
#VU96048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6837		 CWE-79 Medium
No
No
 0.17.0-1.24.1, 0.17.0-150000.3.24.1 15.08.2024 SB2024081534
SB2025021467
SB2025021742
and 1 more
#VU89210 - Incorrect Authorization
CVE-2023-6152		 CWE-863 Low
No
No
 0.14.0-1.18.1, 0.14.0-4.15.1, 0.14.0-150000.3.18.2, 0.17.0-1.24.1, 0.17.0-150000.3.24.1 07.05.2024 SB2024050715
SB2024050717
SB2024050718
and 8 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 0.16.0-1.21.3, 0.16.0-150000.3.21.4 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU77652 - Improper Authentication
CVE-2023-3128		 CWE-287 High
No
No
 0.14.0-4.12.2, 0.17.0-1.24.1, 0.17.0-150000.3.24.1 22.06.2023 SB2023062281
SB2023071336
SB20230720114
and 15 more


Showing elements 1 - 20 out of 81