Homepage

servicemesh-grafana-prometheus

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the servicemesh-grafana-prometheus package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Directory Traversal

*
  • L
Directory Traversal

*
  • L
Resource Exhaustion

*
  • M
Cleartext Storage of Sensitive Information

*
  • M
External Control of Assumed-Immutable Web Parameter

*
  • M
Information Exposure

*
  • M
Improper Check for Dropped Privileges

*
  • M
Incorrect Implementation of Authentication Algorithm

*
  • M
Cross-site Request Forgery (CSRF)

*
  • M
Authorization Bypass Through User-Controlled Key

*
  • M
Authentication Bypass

*
  • M
Cross-site Scripting (XSS)

*
  • M
Authorization Bypass Through User-Controlled Key

*
  • M
NULL Pointer Dereference

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Uncontrolled Recursion

*
  • M
Missing Authorization

*
  • M
OS Command Injection

*
  • M
OS Command Injection

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • M
Resource Exhaustion

*
  • M
Improper Verification of Cryptographic Signature

*
  • M
Cross-site Scripting (XSS)

*
  • L
Cross-site Scripting (XSS)

*
  • L
Incorrect Permission Assignment for Critical Resource

*
  • M
Cross-site Scripting (XSS)

*
  • L
External Control of File Name or Path

*
  • L
Cross-site Scripting (XSS)

*
  • H
Cross-site Scripting (XSS)

*
  • H
Improper Authentication

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • H
Authorization Bypass Through User-Controlled Key

*
  • M
Authorization Bypass Through User-Controlled Key

*
  • C
Misinterpretation of Input

*
  • L
Misinterpretation of Input

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Link Following

*
  • M
Link Following

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Overly Restrictive Regular Expression

*
  • M
Overly Restrictive Regular Expression

*
  • M
Resource Exhaustion

*
  • L
Modification of Assumed-Immutable Data (MAID)

*
  • H
Resource Exhaustion

*
  • L
Insufficient Entropy

*
  • L
Resource Exhaustion

*
  • L
Resource Exhaustion

*
  • M
Open Redirect

*
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • M
Integer Overflow or Wraparound

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Improperly Implemented Security Check for Standard

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Directory Traversal

*
  • M
Resource Exhaustion

*
  • M
Incorrect Privilege Assignment

*
  • M
Integer Overflow or Wraparound

*
  • M
Unchecked Return Value

*
  • M
Buffer Overflow

*
  • M
Open Redirect

*
  • M
Cleartext Transmission of Sensitive Information

*
  • M
Information Exposure

*
  • M
Authorization Bypass Through User-Controlled Key

*
  • M
Improper Input Validation

*
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • M
External Control of File Name or Path

*
  • M
Race Condition

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Directory Traversal

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • L
Resource Exhaustion

*
  • M
Improper Input Validation

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Directory Traversal

*
  • M
Resource Exhaustion

*
  • L
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Open Redirect

*
  • M
Incorrect Calculation

*
  • M
Incorrect Calculation

*
  • M
Resource Exhaustion

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Arbitrary Code Injection

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Arbitrary Code Injection

*
  • M
OS Command Injection

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Improper Certificate Validation

*
  • M
Improper Certificate Validation

*
  • M
Integer Overflow or Wraparound

*
  • L
Modification of Assumed-Immutable Data (MAID)

*
  • L
Integer Overflow or Wraparound

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Input Validation

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • L
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Improper Input Validation

*
  • M
Resource Exhaustion

*
  • H
Improper Validation of Array Index

*
  • H
Authorization Bypass Through User-Controlled Key

*
  • H
Authorization Bypass Through User-Controlled Key

*
  • H
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Resource Exhaustion

*