[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-46146":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":670,"aliases":688,"duplicate_of":9,"upstream":691,"downstream":692,"duplicates":757,"related":758,"reserved_at":9,"published_at":801,"modified_at":802,"state":803,"summary":804,"references_raw":812,"kevs":893,"epss":894,"epss_history":897,"metrics":1165,"affected":1180},"CVE-2022-46146","Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix for the issue. There is no workaround, but attacker must have access to the hashed password to use this functionality.",null,[11,23],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-303","Incorrect Implementation of Authentication Algorithm","The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-90","Reflection Attack in Authentication Protocol",[],{"_key":24,"id":24,"name":25,"description":26,"type":15,"status":16,"abstraction":27,"likelihood_of_exploit":28,"capec":29},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Class","High",[30,192,271,275,279,283,302,491,553,637],{"id":31,"name":32,"techniques":33},"CAPEC-114","Authentication Abuse",[34],{"id":35,"name":36,"tactics":37,"countermeasures":44},"T1548","Abuse Elevation Control Mechanism",[38,41],{"id":39,"name":40},"TA0030","Defense Evasion",{"id":42,"name":43},"TA0111","Privilege Escalation",[45,50,54,58,62,67,71,75,79,83,87,91,95,99,104,108,113,118,122,126,130,135,139,143,147,151,156,160,164,168,172,176,180,184,188],{"id":46,"name":47,"tactic":48},"D3-CI","Configuration Inventory",{"name":49},"Model",{"id":51,"name":52,"tactic":53},"D3-AM","Access Modeling",{"name":49},{"id":55,"name":56,"tactic":57},"D3-DI","Data Inventory",{"name":49},{"id":59,"name":60,"tactic":61},"D3-NTPM","Network Traffic Policy Mapping",{"name":49},{"id":63,"name":64,"tactic":65},"D3-AEM","Application Exception Monitoring",{"name":66},"Detect",{"id":68,"name":69,"tactic":70},"D3-SCA","System Call Analysis",{"name":66},{"id":72,"name":73,"tactic":74},"D3-SFA","System File Analysis",{"name":66},{"id":76,"name":77,"tactic":78},"D3-FA","File Analysis",{"name":66},{"id":80,"name":81,"tactic":82},"D3-FIM","File Integrity Monitoring",{"name":66},{"id":84,"name":85,"tactic":86},"D3-OPM","Operational Process Monitoring",{"name":66},{"id":88,"name":89,"tactic":90},"D3-DA","Dynamic Analysis",{"name":66},{"id":92,"name":93,"tactic":94},"D3-EFA","Emulated File Analysis",{"name":66},{"id":96,"name":97,"tactic":98},"D3-PSA","Process Spawn Analysis",{"name":66},{"id":100,"name":101,"tactic":102},"D3-FEV","File Eviction",{"name":103},"Evict",{"id":105,"name":106,"tactic":107},"D3-AL","Account Locking",{"name":103},{"id":109,"name":110,"tactic":111},"D3-DF","Decoy File",{"name":112},"Deceive",{"id":114,"name":115,"tactic":116},"D3-FE","File Encryption",{"name":117},"Harden",{"id":119,"name":120,"tactic":121},"D3-AA","Agent Authentication",{"name":117},{"id":123,"name":124,"tactic":125},"D3-CDP","Change Default Password",{"name":117},{"id":127,"name":128,"tactic":129},"D3-SCP","System Configuration Permissions",{"name":117},{"id":131,"name":132,"tactic":133},"D3-RC","Restore Configuration",{"name":134},"Restore",{"id":136,"name":137,"tactic":138},"D3-RF","Restore File",{"name":134},{"id":140,"name":141,"tactic":142},"D3-ULA","Unlock Account",{"name":134},{"id":144,"name":145,"tactic":146},"D3-RUAA","Restore User Account Access",{"name":134},{"id":148,"name":149,"tactic":150},"D3-RD","Restore Database",{"name":134},{"id":152,"name":153,"tactic":154},"D3-SCF","System Call Filtering",{"name":155},"Isolate",{"id":157,"name":158,"tactic":159},"D3-CF","Content Filtering",{"name":155},{"id":161,"name":162,"tactic":163},"D3-LFP","Local File Permissions",{"name":155},{"id":165,"name":166,"tactic":167},"D3-RFAM","Remote File Access Mediation",{"name":155},{"id":169,"name":170,"tactic":171},"D3-CQ","Content Quarantine",{"name":155},{"id":173,"name":174,"tactic":175},"D3-CM","Content Modification",{"name":155},{"id":177,"name":178,"tactic":179},"D3-UAP","User Account Permissions",{"name":155},{"id":181,"name":182,"tactic":183},"D3-EAL","Executable Allowlisting",{"name":155},{"id":185,"name":186,"tactic":187},"D3-EDL","Executable Denylisting",{"name":155},{"id":189,"name":190,"tactic":191},"D3-HBPI","Hardware-based Process Isolation",{"name":155},{"id":193,"name":194,"techniques":195},"CAPEC-115","Authentication Bypass",[196],{"id":35,"name":36,"tactics":197,"countermeasures":200},[198,199],{"id":39,"name":40},{"id":42,"name":43},[201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267,269],{"id":46,"name":47,"tactic":202},{"name":49},{"id":51,"name":52,"tactic":204},{"name":49},{"id":55,"name":56,"tactic":206},{"name":49},{"id":59,"name":60,"tactic":208},{"name":49},{"id":63,"name":64,"tactic":210},{"name":66},{"id":68,"name":69,"tactic":212},{"name":66},{"id":72,"name":73,"tactic":214},{"name":66},{"id":76,"name":77,"tactic":216},{"name":66},{"id":80,"name":81,"tactic":218},{"name":66},{"id":84,"name":85,"tactic":220},{"name":66},{"id":88,"name":89,"tactic":222},{"name":66},{"id":92,"name":93,"tactic":224},{"name":66},{"id":96,"name":97,"tactic":226},{"name":66},{"id":100,"name":101,"tactic":228},{"name":103},{"id":105,"name":106,"tactic":230},{"name":103},{"id":109,"name":110,"tactic":232},{"name":112},{"id":114,"name":115,"tactic":234},{"name":117},{"id":119,"name":120,"tactic":236},{"name":117},{"id":123,"name":124,"tactic":238},{"name":117},{"id":127,"name":128,"tactic":240},{"name":117},{"id":131,"name":132,"tactic":242},{"name":134},{"id":136,"name":137,"tactic":244},{"name":134},{"id":140,"name":141,"tactic":246},{"name":134},{"id":144,"name":145,"tactic":248},{"name":134},{"id":148,"name":149,"tactic":250},{"name":134},{"id":152,"name":153,"tactic":252},{"name":155},{"id":157,"name":158,"tactic":254},{"name":155},{"id":161,"name":162,"tactic":256},{"name":155},{"id":165,"name":166,"tactic":258},{"name":155},{"id":169,"name":170,"tactic":260},{"name":155},{"id":173,"name":174,"tactic":262},{"name":155},{"id":177,"name":178,"tactic":264},{"name":155},{"id":181,"name":182,"tactic":266},{"name":155},{"id":185,"name":186,"tactic":268},{"name":155},{"id":189,"name":190,"tactic":270},{"name":155},{"id":272,"name":273,"techniques":274},"CAPEC-151","Identity Spoofing",[],{"id":276,"name":277,"techniques":278},"CAPEC-194","Fake the Source of Data",[],{"id":280,"name":281,"techniques":282},"CAPEC-22","Exploiting Trust in Client",[],{"id":284,"name":285,"techniques":286},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[287],{"id":288,"name":289,"tactics":290,"countermeasures":297},"T1040","Network Sniffing",[291,294],{"id":292,"name":293},"TA0031","Credential Access",{"id":295,"name":296},"TA0102","Discovery",[298],{"id":299,"name":300,"tactic":301},"D3-DNSTA","DNS Traffic Analysis",{"name":66},{"id":303,"name":304,"techniques":305},"CAPEC-593","Session Hijacking",[306,350,463],{"id":307,"name":308,"tactics":309,"countermeasures":313},"T1185","Browser Session Hijacking",[310],{"id":311,"name":312},"TA0100","Collection",[314,318,322,326,330,334,338,342,346],{"id":315,"name":316,"tactic":317},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":66},{"id":319,"name":320,"tactic":321},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":66},{"id":323,"name":324,"tactic":325},"D3-CSPP","Client-server Payload Profiling",{"name":66},{"id":327,"name":328,"tactic":329},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":66},{"id":331,"name":332,"tactic":333},"D3-NTSA","Network Traffic Signature Analysis",{"name":66},{"id":335,"name":336,"tactic":337},"D3-APCA","Application Protocol Command Analysis",{"name":66},{"id":339,"name":340,"tactic":341},"D3-NTCD","Network Traffic Community Deviation",{"name":66},{"id":343,"name":344,"tactic":345},"D3-RTSD","Remote Terminal Session Detection",{"name":66},{"id":347,"name":348,"tactic":349},"D3-NTF","Network Traffic Filtering",{"name":155},{"id":351,"name":352,"tactics":353,"countermeasures":358},"T1550.001","Application Access Token",[354,355],{"id":39,"name":40},{"id":356,"name":357},"TA0109","Lateral Movement",[359,363,367,369,373,375,377,379,381,383,385,387,389,393,397,401,405,409,413,417,421,425,429,433,437,441,445,447,449,453,457,461],{"id":360,"name":361,"tactic":362},"D3-PLA","Process Lineage Analysis",{"name":66},{"id":364,"name":365,"tactic":366},"D3-PSMD","Process Self-Modification Detection",{"name":66},{"id":96,"name":97,"tactic":368},{"name":66},{"id":370,"name":371,"tactic":372},"D3-CCSA","Credential Compromise Scope Analysis",{"name":66},{"id":315,"name":316,"tactic":374},{"name":66},{"id":319,"name":320,"tactic":376},{"name":66},{"id":323,"name":324,"tactic":378},{"name":66},{"id":327,"name":328,"tactic":380},{"name":66},{"id":331,"name":332,"tactic":382},{"name":66},{"id":335,"name":336,"tactic":384},{"name":66},{"id":339,"name":340,"tactic":386},{"name":66},{"id":343,"name":344,"tactic":388},{"name":66},{"id":390,"name":391,"tactic":392},"D3-PT","Process Termination",{"name":103},{"id":394,"name":395,"tactic":396},"D3-PS","Process Suspension",{"name":103},{"id":398,"name":399,"tactic":400},"D3-HR","Host Reboot",{"name":103},{"id":402,"name":403,"tactic":404},"D3-HS","Host Shutdown",{"name":103},{"id":406,"name":407,"tactic":408},"D3-CR","Credential Revocation",{"name":103},{"id":410,"name":411,"tactic":412},"D3-ANCI","Authentication Cache Invalidation",{"name":103},{"id":414,"name":415,"tactic":416},"D3-DUC","Decoy User Credential",{"name":112},{"id":418,"name":419,"tactic":420},"D3-CH","Credential Hardening",{"name":117},{"id":422,"name":423,"tactic":424},"D3-MFA","Multi-factor Authentication",{"name":117},{"id":426,"name":427,"tactic":428},"D3-CRO","Credential Rotation",{"name":117},{"id":430,"name":431,"tactic":432},"D3-TB","Token Binding",{"name":117},{"id":434,"name":435,"tactic":436},"D3-TBA","Token-based Authentication",{"name":117},{"id":438,"name":439,"tactic":440},"D3-RIC","Reissue Credential",{"name":134},{"id":442,"name":443,"tactic":444},"D3-KBPI","Kernel-based Process Isolation",{"name":155},{"id":152,"name":153,"tactic":446},{"name":155},{"id":189,"name":190,"tactic":448},{"name":155},{"id":450,"name":451,"tactic":452},"D3-ABPI","Application-based Process Isolation",{"name":155},{"id":454,"name":455,"tactic":456},"D3-WSAM","Web Session Access Mediation",{"name":155},{"id":458,"name":459,"tactic":460},"D3-CTS","Credential Transmission Scoping",{"name":155},{"id":347,"name":348,"tactic":462},{"name":155},{"id":464,"name":465,"tactics":466,"countermeasures":468},"T1563","Remote Service Session Hijacking",[467],{"id":356,"name":357},[469,471,473,475,477,479,481,483,485,489],{"id":315,"name":316,"tactic":470},{"name":66},{"id":319,"name":320,"tactic":472},{"name":66},{"id":323,"name":324,"tactic":474},{"name":66},{"id":327,"name":328,"tactic":476},{"name":66},{"id":331,"name":332,"tactic":478},{"name":66},{"id":335,"name":336,"tactic":480},{"name":66},{"id":339,"name":340,"tactic":482},{"name":66},{"id":343,"name":344,"tactic":484},{"name":66},{"id":486,"name":487,"tactic":488},"D3-ST","Session Termination",{"name":103},{"id":347,"name":348,"tactic":490},{"name":155},{"id":492,"name":493,"techniques":494},"CAPEC-633","Token Impersonation",[495],{"id":496,"name":497,"tactics":498,"countermeasures":504},"T1134","Access Token Manipulation",[499,500,503],{"id":39,"name":40},{"id":501,"name":502},"TA0005","Stealth",{"id":42,"name":43},[505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541,543,545,547,549,551],{"id":46,"name":47,"tactic":506},{"name":49},{"id":59,"name":60,"tactic":508},{"name":49},{"id":51,"name":52,"tactic":510},{"name":49},{"id":63,"name":64,"tactic":512},{"name":66},{"id":68,"name":69,"tactic":514},{"name":66},{"id":370,"name":371,"tactic":516},{"name":66},{"id":84,"name":85,"tactic":518},{"name":66},{"id":96,"name":97,"tactic":520},{"name":66},{"id":486,"name":487,"tactic":522},{"name":103},{"id":406,"name":407,"tactic":524},{"name":103},{"id":410,"name":411,"tactic":526},{"name":103},{"id":414,"name":415,"tactic":528},{"name":112},{"id":418,"name":419,"tactic":530},{"name":117},{"id":422,"name":423,"tactic":532},{"name":117},{"id":426,"name":427,"tactic":534},{"name":117},{"id":430,"name":431,"tactic":536},{"name":117},{"id":434,"name":435,"tactic":538},{"name":117},{"id":131,"name":132,"tactic":540},{"name":134},{"id":438,"name":439,"tactic":542},{"name":134},{"id":152,"name":153,"tactic":544},{"name":155},{"id":458,"name":459,"tactic":546},{"name":155},{"id":181,"name":182,"tactic":548},{"name":155},{"id":185,"name":186,"tactic":550},{"name":155},{"id":189,"name":190,"tactic":552},{"name":155},{"id":554,"name":555,"techniques":556},"CAPEC-650","Upload a Web Shell to a Web Server",[557],{"id":558,"name":559,"tactics":560,"countermeasures":564},"T1505.003","Web Shell",[561],{"id":562,"name":563},"TA0110","Persistence",[565,569,573,577,581,583,585,587,589,591,593,595,597,599,601,603,605,607,609,613,615,617,619,621,623,625,627,629,631,633,635],{"id":566,"name":567,"tactic":568},"D3-NNI","Network Node Inventory",{"name":49},{"id":570,"name":571,"tactic":572},"D3-PLM","Physical Link Mapping",{"name":49},{"id":574,"name":575,"tactic":576},"D3-LLM","Logical Link Mapping",{"name":49},{"id":578,"name":579,"tactic":580},"D3-EHB","Endpoint Health Beacon",{"name":66},{"id":76,"name":77,"tactic":582},{"name":66},{"id":80,"name":81,"tactic":584},{"name":66},{"id":88,"name":89,"tactic":586},{"name":66},{"id":92,"name":93,"tactic":588},{"name":66},{"id":360,"name":361,"tactic":590},{"name":66},{"id":364,"name":365,"tactic":592},{"name":66},{"id":96,"name":97,"tactic":594},{"name":66},{"id":100,"name":101,"tactic":596},{"name":103},{"id":390,"name":391,"tactic":598},{"name":103},{"id":394,"name":395,"tactic":600},{"name":103},{"id":398,"name":399,"tactic":602},{"name":103},{"id":402,"name":403,"tactic":604},{"name":103},{"id":109,"name":110,"tactic":606},{"name":112},{"id":114,"name":115,"tactic":608},{"name":117},{"id":610,"name":611,"tactic":612},"D3-RNA","Restore Network Access",{"name":134},{"id":136,"name":137,"tactic":614},{"name":134},{"id":157,"name":158,"tactic":616},{"name":155},{"id":161,"name":162,"tactic":618},{"name":155},{"id":165,"name":166,"tactic":620},{"name":155},{"id":169,"name":170,"tactic":622},{"name":155},{"id":173,"name":174,"tactic":624},{"name":155},{"id":181,"name":182,"tactic":626},{"name":155},{"id":185,"name":186,"tactic":628},{"name":155},{"id":442,"name":443,"tactic":630},{"name":155},{"id":152,"name":153,"tactic":632},{"name":155},{"id":189,"name":190,"tactic":634},{"name":155},{"id":450,"name":451,"tactic":636},{"name":155},{"id":638,"name":639,"techniques":640},"CAPEC-94","Adversary in the Middle (AiTM)",[641],{"id":642,"name":643,"tactics":644,"countermeasures":647},"T1557","Adversary-in-the-Middle",[645,646],{"id":292,"name":293},{"id":311,"name":312},[648,650,652,654,656,658,660,662,664,668],{"id":315,"name":316,"tactic":649},{"name":66},{"id":319,"name":320,"tactic":651},{"name":66},{"id":323,"name":324,"tactic":653},{"name":66},{"id":327,"name":328,"tactic":655},{"name":66},{"id":331,"name":332,"tactic":657},{"name":66},{"id":335,"name":336,"tactic":659},{"name":66},{"id":339,"name":340,"tactic":661},{"name":66},{"id":343,"name":344,"tactic":663},{"name":66},{"id":665,"name":666,"tactic":667},"D3-CAA","Connection Attempt Analysis",{"name":66},{"id":347,"name":348,"tactic":669},{"name":155},[671,680,684],{"_key":672,"name":673,"source":674,"url":675,"maturity":676,"reliability_score":677,"verified":678,"type":9,"platforms":679,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_170A51104E2D52B1","Exploit Reference (openwall.com)","reference","http://www.openwall.com/lists/oss-security/2022/11/29/1","unknown",0.2,false,[],{"_key":681,"name":673,"source":674,"url":682,"maturity":676,"reliability_score":677,"verified":678,"type":9,"platforms":683,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_65638534AF88EEC3","http://www.openwall.com/lists/oss-security/2022/11/29/2",[],{"_key":685,"name":673,"source":674,"url":686,"maturity":676,"reliability_score":677,"verified":678,"type":9,"platforms":687,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_EBC52A7228524A64","http://www.openwall.com/lists/oss-security/2022/11/29/4",[],[689,690],"GHSA-7rg2-cxvp-9p7p","GO-2022-1130",[],[693,695,697,699,701,703,705,707,709,711,713,715,717,719,721,723,725,727,729,731,733,735,737,739,741,743,745,747,749,751,753,755],{"_key":694},"SUSE-SU-2023:0460-1",{"_key":696},"SUSE-SU-2023:2185-1",{"_key":698},"SUSE-RU-2023:2592-1",{"_key":700},"SUSE-SU-2023:0467-1",{"_key":702},"SUSE-SU-2023:0811-1",{"_key":704},"SUSE-SU-2023:1857-1",{"_key":706},"SUSE-SU-2023:1858-1",{"_key":708},"SUSE-SU-2023:2183-1",{"_key":710},"SUSE-SU-2023:2579-1",{"_key":712},"SUSE-SU-2023:2594-1",{"_key":714},"SUSE-SU-2023:3867-1",{"_key":716},"SUSE-SU-2023:3875-1",{"_key":718},"SUSE-SU-2024:0191-1",{"_key":720},"SUSE-SU-2024:0196-1",{"_key":722},"SUSE-SU-2023:0465-1",{"_key":724},"SUSE-SU-2023:0812-1",{"_key":726},"SUSE-SU-2023:0821-1",{"_key":728},"SUSE-SU-2023:1859-1",{"_key":730},"SUSE-SU-2023:2182-1",{"_key":732},"SUSE-SU-2023:2187-1",{"_key":734},"SUSE-SU-2023:2578-1",{"_key":736},"SUSE-SU-2023:2598-1",{"_key":738},"SUSE-SU-2023:3868-1",{"_key":740},"OPENSUSE-SU-2024:12637-1",{"_key":742},"OPENSUSE-SU-2024:12650-1",{"_key":744},"OPENSUSE-SU-2024:12691-1",{"_key":746},"OPENSUSE-SU-2024:12700-1",{"_key":748},"OPENSUSE-SU-2024:12872-1",{"_key":750},"OPENSUSE-SU-2024:12904-1",{"_key":752},"OPENSUSE-SU-2024:13109-1",{"_key":754},"DEBIAN-CVE-2022-46146",{"_key":756},"UBUNTU-CVE-2022-46146",[],[759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,791,793,795,797,799],{"_key":694},{"_key":696},{"_key":698},{"_key":700},{"_key":702},{"_key":704},{"_key":706},{"_key":708},{"_key":710},{"_key":712},{"_key":714},{"_key":716},{"_key":718},{"_key":720},{"_key":722},{"_key":724},{"_key":726},{"_key":728},{"_key":730},{"_key":732},{"_key":734},{"_key":736},{"_key":738},{"_key":740},{"_key":742},{"_key":744},{"_key":746},{"_key":748},{"_key":750},{"_key":752},{"_key":790},"CGA-37WM-7R8R-2G8M",{"_key":792},"CGA-385X-93F7-963Q",{"_key":794},"CGA-454F-XHFF-64FQ",{"_key":796},"CGA-7PP4-6GGR-M3VR",{"_key":798},"CGA-VJWG-3X86-P77Q",{"_key":800},"CGA-Q8CM-W99C-4FJ2","2022-11-29T00:00:00.000Z","2024-08-03T14:24:03.295Z","Modified",{"cisa_kev":678,"cisa_ransomware":678,"cisa_vendor":9,"epss_severity":805,"epss_score":806,"severity":807,"severity_score":808,"severity_version":809,"severity_source":810,"severity_vector":811,"severity_status":803},"low",0.00185,"high",8.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[813,822,828,833,836,839,844,848,852,856,860,864,869,873,877,881,885,889],{"url":814,"sources":815,"tags":818},"https://github.com/prometheus/exporter-toolkit/security/advisories/GHSA-7rg2-cxvp-9p7p",[816,810,817],"cve.org","osv_go",[819,820,821],"Third Party Advisory","WEB","Advisory",{"url":823,"sources":824,"tags":825},"https://github.com/prometheus/exporter-toolkit/commit/5b1eab34484ddd353986bce736cd119d863e4ff5",[816,810,817],[826,819,820,827],"Patch","FIX",{"url":675,"sources":829,"tags":830},[816,810,817],[831,832,819,820],"Mailing List","Exploit",{"url":682,"sources":834,"tags":835},[816,810,817],[831,832,826,819,820],{"url":686,"sources":837,"tags":838},[816,810,817],[831,832,826,819,820],{"url":840,"sources":841,"tags":842},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULVDTAI76VATRAHTKCE2SUJ4NC3PQZ6Y/",[816,810],[843],"Vendor Advisory",{"url":845,"sources":846,"tags":847},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JRSHISR64L6QGSMDFZDNPHHIXSCAKK26/",[816,810],[843],{"url":849,"sources":850,"tags":851},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UH24VXIB25OGHF4VGY4PLZMTGTI3BHCA/",[816,810],[843],{"url":853,"sources":854,"tags":855},"https://security.gentoo.org/glsa/202401-15",[816,810,817],[843,820],{"url":857,"sources":858,"tags":859},"https://nvd.nist.gov/vuln/detail/CVE-2022-46146",[817],[821],{"url":861,"sources":862,"tags":863},"https://github.com/prometheus/exporter-toolkit/commit/25288779bc59d00c41b4a1706c6b87f0561ef2d7",[817],[820],{"url":865,"sources":866,"tags":867},"https://github.com/prometheus/exporter-toolkit",[817],[868],"PACKAGE",{"url":870,"sources":871,"tags":872},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JRSHISR64L6QGSMDFZDNPHHIXSCAKK26",[817],[820],{"url":874,"sources":875,"tags":876},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UH24VXIB25OGHF4VGY4PLZMTGTI3BHCA",[817],[820],{"url":878,"sources":879,"tags":880},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULVDTAI76VATRAHTKCE2SUJ4NC3PQZ6Y",[817],[820],{"url":882,"sources":883,"tags":884},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JRSHISR64L6QGSMDFZDNPHHIXSCAKK26",[817],[820],{"url":886,"sources":887,"tags":888},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UH24VXIB25OGHF4VGY4PLZMTGTI3BHCA",[817],[820],{"url":890,"sources":891,"tags":892},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULVDTAI76VATRAHTKCE2SUJ4NC3PQZ6Y",[817],[820],[],{"date":895,"score":806,"percentile":896},"2026-06-04",0.39981,[898,902,905,908,910,914,917,920,922,925,928,931,934,937,939,943,946,949,952,955,958,961,964,967,970,973,976,980,983,986,989,992,995,998,1001,1004,1007,1010,1013,1016,1019,1022,1025,1028,1031,1034,1037,1040,1042,1045,1048,1051,1054,1057,1060,1063,1066,1069,1072,1075,1078,1081,1084,1087,1090,1093,1096,1099,1102,1105,1108,1111,1113,1115,1118,1121,1124,1127,1130,1133,1136,1139,1142,1144,1147,1150,1153,1156,1159,1162],{"date":899,"score":900,"percentile":901},"2025-11-04",0.001,0.28353,{"date":903,"score":900,"percentile":904},"2025-11-05",0.28325,{"date":906,"score":900,"percentile":907},"2025-11-06",0.28337,{"date":909,"score":900,"percentile":907},"2025-11-07",{"date":911,"score":912,"percentile":913},"2025-11-08",0.00108,0.29734,{"date":915,"score":912,"percentile":916},"2025-11-09",0.29712,{"date":918,"score":912,"percentile":919},"2025-11-10",0.29694,{"date":921,"score":912,"percentile":916},"2025-11-11",{"date":923,"score":912,"percentile":924},"2025-11-12",0.29754,{"date":926,"score":912,"percentile":927},"2025-11-13",0.29767,{"date":929,"score":912,"percentile":930},"2025-11-14",0.29768,{"date":932,"score":912,"percentile":933},"2025-11-15",0.29761,{"date":935,"score":912,"percentile":936},"2025-11-16",0.29738,{"date":938,"score":912,"percentile":916},"2025-11-17",{"date":940,"score":941,"percentile":942},"2025-11-18",0.00248,0.44659,{"date":944,"score":941,"percentile":945},"2025-11-19",0.44668,{"date":947,"score":941,"percentile":948},"2025-11-20",0.44675,{"date":950,"score":912,"percentile":951},"2025-11-21",0.29751,{"date":953,"score":912,"percentile":954},"2025-11-22",0.29759,{"date":956,"score":912,"percentile":957},"2025-11-23",0.29718,{"date":959,"score":912,"percentile":960},"2025-11-24",0.29698,{"date":962,"score":912,"percentile":963},"2025-11-25",0.29689,{"date":965,"score":912,"percentile":966},"2025-11-26",0.29688,{"date":968,"score":912,"percentile":969},"2025-11-27",0.29701,{"date":971,"score":912,"percentile":972},"2025-11-28",0.29683,{"date":974,"score":912,"percentile":975},"2025-11-29",0.29673,{"date":977,"score":978,"percentile":979},"2025-11-30",0.00128,0.32909,{"date":981,"score":978,"percentile":982},"2025-12-01",0.33001,{"date":984,"score":978,"percentile":985},"2025-12-02",0.33011,{"date":987,"score":978,"percentile":988},"2025-12-03",0.33007,{"date":990,"score":978,"percentile":991},"2025-12-04",0.32908,{"date":993,"score":978,"percentile":994},"2025-12-05",0.3294,{"date":996,"score":978,"percentile":997},"2025-12-06",0.32944,{"date":999,"score":978,"percentile":1000},"2025-12-07",0.32921,{"date":1002,"score":978,"percentile":1003},"2025-12-08",0.32931,{"date":1005,"score":978,"percentile":1006},"2025-12-09",0.32979,{"date":1008,"score":978,"percentile":1009},"2025-12-10",0.33038,{"date":1011,"score":978,"percentile":1012},"2025-12-11",0.33063,{"date":1014,"score":978,"percentile":1015},"2025-12-12",0.33096,{"date":1017,"score":978,"percentile":1018},"2025-12-13",0.33079,{"date":1020,"score":978,"percentile":1021},"2025-12-14",0.33055,{"date":1023,"score":978,"percentile":1024},"2025-12-15",0.33006,{"date":1026,"score":978,"percentile":1027},"2025-12-16",0.3303,{"date":1029,"score":978,"percentile":1030},"2025-12-17",0.3309,{"date":1032,"score":978,"percentile":1033},"2025-12-18",0.3314,{"date":1035,"score":978,"percentile":1036},"2025-12-19",0.33165,{"date":1038,"score":978,"percentile":1039},"2025-12-20",0.33149,{"date":1041,"score":978,"percentile":1030},"2025-12-21",{"date":1043,"score":978,"percentile":1044},"2025-12-22",0.3306,{"date":1046,"score":978,"percentile":1047},"2025-12-23",0.33056,{"date":1049,"score":978,"percentile":1050},"2025-12-24",0.33049,{"date":1052,"score":978,"percentile":1053},"2025-12-25",0.33116,{"date":1055,"score":978,"percentile":1056},"2025-12-26",0.33101,{"date":1058,"score":978,"percentile":1059},"2025-12-27",0.33104,{"date":1061,"score":978,"percentile":1062},"2025-12-28",0.3301,{"date":1064,"score":978,"percentile":1065},"2025-12-29",0.32977,{"date":1067,"score":978,"percentile":1068},"2025-12-30",0.32971,{"date":1070,"score":978,"percentile":1071},"2025-12-31",0.33021,{"date":1073,"score":978,"percentile":1074},"2026-01-01",0.33167,{"date":1076,"score":978,"percentile":1077},"2026-01-02",0.33154,{"date":1079,"score":978,"percentile":1080},"2026-01-03",0.33139,{"date":1082,"score":978,"percentile":1083},"2026-01-04",0.32999,{"date":1085,"score":978,"percentile":1086},"2026-01-05",0.32983,{"date":1088,"score":978,"percentile":1089},"2026-01-06",0.32995,{"date":1091,"score":978,"percentile":1092},"2026-01-07",0.33015,{"date":1094,"score":978,"percentile":1095},"2026-01-08",0.33046,{"date":1097,"score":978,"percentile":1098},"2026-01-09",0.33047,{"date":1100,"score":978,"percentile":1101},"2026-01-10",0.33045,{"date":1103,"score":978,"percentile":1104},"2026-01-11",0.33024,{"date":1106,"score":978,"percentile":1107},"2026-01-12",0.32954,{"date":1109,"score":978,"percentile":1110},"2026-01-13",0.32937,{"date":1112,"score":978,"percentile":1086},"2026-01-14",{"date":1114,"score":978,"percentile":1006},"2026-01-15",{"date":1116,"score":978,"percentile":1117},"2026-01-16",0.33,{"date":1119,"score":978,"percentile":1120},"2026-01-17",0.32984,{"date":1122,"score":978,"percentile":1123},"2026-01-18",0.32924,{"date":1125,"score":978,"percentile":1126},"2026-01-19",0.3289,{"date":1128,"score":978,"percentile":1129},"2026-01-20",0.32872,{"date":1131,"score":978,"percentile":1132},"2026-01-21",0.32832,{"date":1134,"score":978,"percentile":1135},"2026-01-22",0.32804,{"date":1137,"score":978,"percentile":1138},"2026-01-23",0.32869,{"date":1140,"score":978,"percentile":1141},"2026-01-24",0.32875,{"date":1143,"score":978,"percentile":1135},"2026-01-25",{"date":1145,"score":978,"percentile":1146},"2026-01-26",0.32721,{"date":1148,"score":978,"percentile":1149},"2026-01-27",0.32708,{"date":1151,"score":978,"percentile":1152},"2026-01-28",0.32681,{"date":1154,"score":978,"percentile":1155},"2026-01-29",0.3264,{"date":1157,"score":978,"percentile":1158},"2026-01-30",0.3263,{"date":1160,"score":978,"percentile":1161},"2026-01-31",0.32641,{"date":1163,"score":978,"percentile":1164},"2026-02-01",0.32734,[1166,1173,1178],{"source":816,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1167,"cvss_v4_0":9},{"baseScore":1168,"baseSeverity":1169,"vectorString":1170,"impactScore":1171,"exploitabilityScore":1172},6.2,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",6,6.4,{"source":810,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1174,"cvss_v4_0":9},{"baseScore":808,"baseSeverity":1175,"vectorString":811,"impactScore":1176,"exploitabilityScore":1177},"HIGH",9.8,7.2,{"source":817,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1179,"cvss_v4_0":9},{"baseScore":1168,"baseSeverity":9,"vectorString":1170,"impactScore":1171,"exploitabilityScore":1172},[1181,1199,1210],{"ecosystem":1182,"name":1183,"vendor":1184,"product":1185,"cpe_part":9,"purl_type":1186,"purl_namespace":1184,"purl_name":1185,"source":9,"versions":1187},"Go","github.com/prometheus/exporter-toolkit","github.com/prometheus","exporter-toolkit","golang",[1188,1194],{"version":1189,"is_range":1190,"range_type":1191,"version_start":9,"version_start_type":9,"version_end":1192,"version_end_type":1193,"fixed_in":9},"lt0_7_2",true,"semver","0.7.2","excluding",{"version":1195,"is_range":1190,"range_type":1191,"version_start":1196,"version_start_type":1197,"version_end":1198,"version_end_type":1193,"fixed_in":9},"gte0_8_0_lt0_8_2","0.8.0","including","0.8.2",{"ecosystem":9,"name":1200,"vendor":1201,"product":1202,"cpe_part":1203,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1204},"exporter toolkit","prometheus","exporter_toolkit","a",[1205,1208],{"version":1206,"is_range":1190,"range_type":1207,"version_start":9,"version_start_type":9,"version_end":1192,"version_end_type":1193,"fixed_in":9},"lt0.7.2","cpe",{"version":1209,"is_range":1190,"range_type":1207,"version_start":1196,"version_start_type":1197,"version_end":1198,"version_end_type":1193,"fixed_in":9},"gte0.8.0_lt0.8.2",{"ecosystem":9,"name":1185,"vendor":1201,"product":1185,"cpe_part":1203,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1211},[1212,1214],{"version":1213,"is_range":1190,"range_type":816,"version_start":9,"version_start_type":9,"version_end":1192,"version_end_type":1193,"fixed_in":9},"\u003C 0.7.2",{"version":1215,"is_range":1190,"range_type":816,"version_start":1196,"version_start_type":1197,"version_end":1198,"version_end_type":1193,"fixed_in":9},">= 0.8.0, \u003C 0.8.2"]