golang-github-prometheus-promu

Direct Vulnerabilities

Known vulnerabilities in the golang-github-prometheus-promu package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M HTTP Request Smuggling	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Validation of Unsafe Equivalence in Input	*
M Time-of-check Time-of-use (TOCTOU)	*
M Excessive Platform Resource Consumption within a Loop	*
H Improper Certificate Validation	*
H Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M CVE-2025-68121	*
L Integer Overflow or Wraparound	*
M Resource Exhaustion	*
M Directory Traversal	*
M Information Exposure Through Log Files	*
H Excessive Platform Resource Consumption within a Loop	*
L CVE-2025-58186	*
M Reachable Assertion	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Output Neutralization for Logs	*
M Expected Behavior Violation	*
M Expected Behavior Violation	*
M Time-of-check Time-of-use (TOCTOU)	*
M CVE-2025-4673	*
M HTTP Request Smuggling	*
M Improper Input Validation	*
M Information Exposure	*
L Improper Verification of Cryptographic Signature	*
M Use of Uninitialized Variable	*
M Improperly Controlled Sequential Memory Allocation	*
M Uncontrolled Recursion	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Certificate Validation	*
M Improper Input Validation	*
M Buffer Access with Incorrect Length Value	*
L Information Exposure	<0:0-2.git85ceabc.el7
M Improper Input Validation	<0:0-2.git85ceabc.el7
M Improper Authentication	<0:0-1.git85ceabc.el7
M Improper Authorization	<0:0-2.git85ceabc.el7
H Improper Access Control	<0:0-5.git85ceabc.el7
M Resource Exhaustion	*
M Improperly Controlled Sequential Memory Allocation	*
L Insufficient Entropy	*
M Integer Overflow or Wraparound	*
M Incorrect Calculation	*
L Race Condition	*
L Race Condition	<0:0.5.0-3.git642a960.el7
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	<0:0.5.0-3.git642a960.el7
M HTTP Request Smuggling	*
H Resource Exhaustion	<0:0-5.git85ceabc.el7
H Resource Exhaustion	<0:0-5.git85ceabc.el7
H Resource Exhaustion	<0:0.5.0-2.git642a960.el7
H Resource Exhaustion	<0:0.5.0-2.git642a960.el7
H Resource Exhaustion	<0:0-5.git85ceabc.el7
H Resource Exhaustion	<0:0-5.git85ceabc.el7

golang-github-prometheus-promu

Direct Vulnerabilities

Fix vulnerabilities automatically