Network observability operator
This hub aggregates every CVE we track for Network observability operator, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Operating Systemson-prem
15
CVEs tracked
1
Critical
9
High
1
In CISA KEV
Severity distribution
HIGH9MEDIUM5CRITICAL1
Monthly trend
1
0
0
0
0
0
0
0
0
2
0
0
0
0
0
1
0
0
1
5
0
0
0
0
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Network observability operator.
- CVE-2026-32281Inefficient policy validation in crypto/x5097.5
- CVE-2026-32283Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5
- CVE-2026-32288Unbounded allocation for old GNU sparse in archive/tar5.5
- CVE-2026-32289JsBraceDepth Context Tracking Bugs (XSS) in html/template6.1
- CVE-2026-33810Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x5098.2
- CVE-2026-33748BuildKit Git URL subdir component can cause access to restricted files7.5
- CVE-2025-66418urllib3 allows an unbounded number of links in the decompression chain7.5
- CVE-2025-50182urllib3 does not control redirects in browsers and Node.js5.3
- CVE-2025-50181urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation5.3
- CVE-2024-45801Tampering by prototype polution in DOMPurify7.3
- CVE-2023-42282The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.9.8
- CVE-2023-26159Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, ...7.3
- CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.KEV7.5
- CVE-2023-29409Large RSA keys can cause high CPU usage in crypto/tls5.3
- CVE-2022-41725Excessive resource consumption in mime/multipart7.5
Product normalization is registry-driven with AI assist and human review. How it works