Skip to content
OpenAdvisories

Package · Wolfi

telegraf-1.38

99 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-81870

    OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, expo…

    open-telemetry opentelemetry-go zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Low 3.7
    CVE-2026-88013

    rclone: http backend forwards custom/auth headers to a different host on redirect

    rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configured through --http-headers or headers= to requests in backend/http/http.go, while …

    rclone rclone telegraf-1.38 rclone Debian Ubuntu Wolfi Go
  • Low 2.3
    CVE-2026-41889

    pgx: SQL Injection via placeholder confusion with dollar quoted string literals

    pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be inte…

    jackc pgx kots k3s Debian Ubuntu Azure Linux Wolfi Go