golang-github-prometheus-promu vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the golang-github-prometheus-promu package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
L Improper Verification of Cryptographic Signature	*
M Information Exposure	*
M Use of Uninitialized Variable	*
M Improper Input Validation	*
H Improper Validation of Integrity Check Value	<0:0.15.0-15.2.gitd5383c5.el9
H Resource Exhaustion	<0:0.15.0-15.2.gitd5383c5.el9
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:0.15.0-15.2.gitd5383c5.el9
H Arbitrary Code Injection	<0:0.15.0-15.2.gitd5383c5.el9
H Misinterpretation of Input	<0:0.15.0-15.2.gitd5383c5.el9
H Information Exposure	<0:0.15.0-15.2.gitd5383c5.el9
H Incorrect Behavior Order	<0:0.15.0-15.2.gitd5383c5.el9
H Improper Validation of Integrity Check Value	<0:0.15.0-15.2.gitd5383c5.el9
H Resource Exhaustion	<0:0.15.0-15.2.gitd5383c5.el9
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:0.15.0-15.2.gitd5383c5.el9
H Arbitrary Code Injection	<0:0.15.0-15.2.gitd5383c5.el9
H Misinterpretation of Input	<0:0.15.0-15.2.gitd5383c5.el9
H Improper Input Validation	<0:0.15.0-15.2.gitd5383c5.el9
H Improper Input Validation	<0:0.15.0-15.2.gitd5383c5.el9
H Information Exposure	<0:0.15.0-15.2.gitd5383c5.el9
H Incorrect Behavior Order	<0:0.15.0-15.2.gitd5383c5.el9
M Improper Input Validation	*
H Improper Input Validation	<0:0.15.0-15.2.gitd5383c5.el9
H Improper Input Validation	<0:0.15.0-15.2.gitd5383c5.el9
M Resource Exhaustion	*
M Improperly Controlled Sequential Memory Allocation	*
L Insufficient Entropy	*
M Integer Overflow or Wraparound	*
M Buffer Overflow	*
M Resource Exhaustion	*
M Unchecked Return Value	*
M Incorrect Authorization	*
M Integer Overflow or Wraparound	*
M Information Exposure	*
M Resource Exhaustion	*
L Improper Input Validation	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Improper Input Validation	*
M Incorrect Calculation	*
M Improper Certificate Validation	*
L Race Condition	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M HTTP Request Smuggling	*
H Resource Exhaustion	*
H Resource Exhaustion	*
L Improper Input Validation	*
L Improper Input Validation	*

Vulnerability

Vulnerable Version

Improper Verification of Cryptographic Signature