Skip to content
OpenAdvisories

Package · Wolfi

loki-3.6-logcli

60 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-81870

    OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, expo…

    open-telemetry opentelemetry-go zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Low 1.7
    CVE-2026-26958

    filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity

    filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the iden…

    FiloSottile filippo.io/edwards25519 kots aactl Debian Ubuntu Azure Linux Wolfi Go
  • Low 2.5
    CVE-2020-8912

    In-band key negotiation issue in AWS S3 Crypto SDK for GoLang

    A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorithm of an object in the bucket, which can then allow them to c…

    Google AWS S3 Crypto SDK for GoLang zot kots Wolfi Go