telegraf-1.37

Direct Vulnerabilities

Known vulnerabilities in the telegraf-1.37 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Allocation of Resources Without Limits or Throttling	*
L Information Exposure	*
L Incorrect Conversion between Numeric Types	*
L Inadequate Encryption Strength	*
L Signed to Unsigned Conversion Error	*
L Improper Encoding or Escaping of Output	*
L Integer Overflow or Wraparound	*
L Cleartext Storage of Sensitive Information in Memory	*
L Uncontrolled Memory Allocation	*
L Improper Check for Unusual or Exceptional Conditions	*
L Directory Traversal	*
L Improper Validation of Array Index	*
L Exposure of Data Element to Wrong Session	*
L CRLF Injection	*
L CVE-2026-56855	*
L GHSA-xmrv-pmrh-hhx2	*
L Allocation of Resources Without Limits or Throttling	*
L Improper Handling of Case Sensitivity	*
L Directory Traversal	*
L GHSA-h4mf-4v27-hggj	*
L GHSA-3x6r-wxxg-53vv	*
L GHSA-8v25-v8p6-qf7v	*
L GHSA-hrxh-6v49-42gf	*
L Uncontrolled Memory Allocation	*
L Cross-site Scripting (XSS)	*
L Link Following	*
L GHSA-3fxj-6jh8-hvhx	*
L GHSA-gwfq-86j8-7qhv	*
L Allocation of Resources Without Limits or Throttling	*
L CVE-2026-17106	*
L Directory Traversal	*
L Information Exposure	*
L GHSA-259r-337f-4rfw	*
L GHSA-945v-v9p3-v5xw	*
L CVE-2026-56854	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
L GHSA-gx4c-2hqx-cw2r	*
L GHSA-gcjh-h69q-9w9g	*
L Integer Overflow or Wraparound	*
M Improper Authentication	*
L CVE-2026-56852	*
L CVE-2026-46600	*
H Off-by-one Error	*
L Directory Traversal	*
L OS Command Injection	*
M Improper Authentication	*
L Race Condition	*
C SQL Injection	*
L Out-of-bounds Read	*
H Allocation of Resources Without Limits or Throttling	*
L Improper Authentication	*
M Cross-site Scripting (XSS)	*
L CVE-2026-2303	*
L GHSA-8mxv-9xhp-86h4	*
H Integer Underflow	*
M Cross-site Scripting (XSS)	*
L GO-2026-5932	*
L Resource Exhaustion	*
L Link Following	*
L Incorrect Authorization	*
L Resource Exhaustion	*
L GHSA-mpwr-8vm7-h73f	*
L Improper Authorization	*
L CVE-2026-78662	*
L Directory Traversal	*
L Improper Authentication	*
M Authentication Bypass	*
L CVE-2026-56864	<1.37.3-r8
L CVE-2026-56865	<1.37.3-r8
L CVE-2026-56859	<1.37.3-r8
L CVE-2026-33818	<1.37.3-r8
L CVE-2026-56858	<1.37.3-r8
L CVE-2026-56862	<1.37.3-r8
L CVE-2026-39821	<1.37.3-r8
L CVE-2026-56853	<1.37.3-r8
L CVE-2026-56860	<1.37.3-r8
L GHSA-rjr7-jggh-pgcp	*
L GHSA-9g5q-2w5x-hmxf	*
L CVE-2026-42505	<1.37.3-r7
L CVE-2026-39822	<1.37.3-r7
H Integer Overflow or Wraparound	<1.37.3-r2
L Missing Authentication for Critical Function	*
L Improper Input Validation	*
L Integer Overflow or Wraparound	*
L Uncontrolled Search Path Element	*
H Symlink Following	*
C Missing Authentication for Critical Function	*
L Uncaught Exception	*
H Plaintext Storage of a Password	*
L Integer Overflow or Wraparound	*
H Authentication Bypass	*
M Incorrect Authorization	*
L Resource Exhaustion	*
C OS Command Injection	*
L Improper Authorization	*
M Information Exposure	*
L Information Exposure	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Improper Validation of Array Index	*
L Allocation of Resources Without Limits or Throttling	*
L NULL Pointer Dereference	*

Vulnerability

Vulnerable Version

Allocation of Resources Without Limits or Throttling