telegraf-fips-1.38

Direct Vulnerabilities

Known vulnerabilities in the telegraf-fips-1.38 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Incorrect Conversion between Numeric Types	*
L Allocation of Resources Without Limits or Throttling	*
L Signed to Unsigned Conversion Error	*
L Cleartext Storage of Sensitive Information in Memory	*
L Improper Check for Unusual or Exceptional Conditions	*
L Integer Overflow or Wraparound	*
L Uncontrolled Memory Allocation	*
L Inadequate Encryption Strength	*
L Improper Encoding or Escaping of Output	*
L Information Exposure	*
L Directory Traversal	*
L CVE-2026-17106	*
L GHSA-mpwr-8vm7-h73f	*
H Allocation of Resources Without Limits or Throttling	*
L GHSA-8v25-v8p6-qf7v	*
L GO-2026-5932	*
L GHSA-3fxj-6jh8-hvhx	*
L Cross-site Scripting (XSS)	*
L Directory Traversal	*
L GHSA-h4mf-4v27-hggj	*
L Directory Traversal	*
L GHSA-xmrv-pmrh-hhx2	*
L GHSA-945v-v9p3-v5xw	*
L GHSA-259r-337f-4rfw	*
L GHSA-3x6r-wxxg-53vv	*
L CVE-2026-78662	*
M Information Exposure	*
L GHSA-gx4c-2hqx-cw2r	*
L Resource Exhaustion	*
L GHSA-gcjh-h69q-9w9g	*
L Directory Traversal	*
L GHSA-gwfq-86j8-7qhv	*
L Allocation of Resources Without Limits or Throttling	*
L CVE-2026-46600	*
L GHSA-hrxh-6v49-42gf	*
L OS Command Injection	*
L Integer Overflow or Wraparound	*
L Directory Traversal	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Link Following	*
L CVE-2026-56855	*
L CVE-2026-2303	*
L Improper Authentication	*
L Link Following	*
L Uncontrolled Memory Allocation	*
L Improper Handling of Case Sensitivity	*
L CVE-2026-56852	*
L Resource Exhaustion	*
H Off-by-one Error	*
L Exposure of Data Element to Wrong Session	*
L Out-of-bounds Read	*
L CRLF Injection	*
L Improper Validation of Array Index	*
L Race Condition	*
L Resource Exhaustion	*
L CVE-2026-56854	*
H Integer Underflow	*
L GHSA-8mxv-9xhp-86h4	*
L CVE-2026-56864	<1.38.4-r3
L CVE-2026-56865	<1.38.4-r3
L CVE-2026-56862	<1.38.4-r3
L CVE-2026-33818	<1.38.4-r3
L CVE-2026-56859	<1.38.4-r3
L CVE-2026-56853	<1.38.4-r3
L CVE-2026-56860	<1.38.4-r3
L CVE-2026-56858	<1.38.4-r3
L CVE-2026-39821	<1.38.4-r3
L GHSA-9g5q-2w5x-hmxf	*
L GHSA-rjr7-jggh-pgcp	*
L CVE-2026-39822	<1.38.4-r2
L CVE-2026-42505	<1.38.4-r2
L Missing Authentication for Critical Function	*
C Missing Authentication for Critical Function	*
H Symlink Following	*
C OS Command Injection	*
H Authentication Bypass	*
L Uncontrolled Search Path Element	*

Vulnerability

Vulnerable Version

Incorrect Conversion between Numeric Types