Known vulnerabilities in prometheus-postgres_exporter-debuginfo

Known vulnerabilities in prometheus-postgres_exporter-debuginfo

Vendor: SUSE

Software: prometheus-postgres_exporter-debuginfo

Software CPE: cpe:2.3:o:suse:prometheus-postgres_exporter-debuginfo:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 13

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU128147 - Resource exhaustion CVE-2026-31958	CWE-400	Medium	No	No	0.10.1-160002.1.1	27.04.2026	SB20260427102 SB20260427109 SB20260427110 and 40 more
#VU124876 - Inefficient Regular Expression Complexity CVE-2026-25547	CWE-1333	Low	No	No	0.10.1-159000.2.2.1	06.04.2026	SB2026040628 SB2026040631 SB2026040632 and 13 more
#VU123311 - Improper Control of Generation of Code ('Code Injection') CVE-2026-1615	CWE-94	High	No	No	0.10.1-159000.2.2.1	27.02.2026	SB2026022707 SB2026022708 SB2026032720 and 4 more
#VU123310 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-61140	CWE-1321	High	No	No	0.10.1-159000.2.2.1	27.02.2026	SB2026022706 SB2026022708 SB2026030405 and 3 more
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-27606	CWE-22	High	Available	No	0.10.1-159000.2.2.1	24.02.2026	SB2026022445 SB2026040631 SB2026040632 and 2 more
#VU122756 - Improper Access Control CVE-2026-21722	CWE-284	Low	No	No	0.10.1-159000.2.2.1	12.02.2026	SB2026021238 SB20260325198 SB2026040631 and 1 more
#VU120229 - Improper Authentication CVE-2025-62349	CWE-287	Low	No	No	0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1	19.12.2025	SB2025121950 SB2025121951 SB2025121952 and 32 more
#VU120228 - Improper Control of Generation of Code ('Code Injection') CVE-2025-62348	CWE-94	Medium	No	No	0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1	19.12.2025	SB2025121950 SB2025121951 SB2025121952 and 32 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2025-67724	CWE-644	Low	No	No	0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 35 more
#VU119884 - Excessive Iteration CVE-2025-67725	CWE-834	Low	No	No	0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 41 more
#VU119883 - Excessive Iteration CVE-2025-67726	CWE-834	Medium	No	No	0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1	12.12.2025	SB2025121205 SB2025123045 SB2026010587 and 41 more
#VU113081 - Exposure of sensitive information to an unauthorized actor CVE-2025-3415	CWE-200	Medium	No	No	0.10.1-159000.2.2.1	21.07.2025	SB2025072113 SB2025112453 SB2025112454 and 3 more
#VU61599 - Improper input validation CVE-2022-21698	CWE-20	Medium	No	No	0.10.1-120002.3.3.2	24.03.2022	SB2022021530 SB2022032413 SB2022040807 and 110 more