In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsUpgrade Chainguard
prometheus-mongodb-exporter-fips-0.37
to version 0.37.0-r16 or higher.
Note: Versions mentioned in the description apply only to the upstream prometheus-mongodb-exporter-fips-0.37
package and not the prometheus-mongodb-exporter-fips-0.37
package as distributed by Chainguard
.
See How to fix?
for Chainguard
relevant fixed versions and status.
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.