golang-github-prometheus-alertmanager (SUSE:Multi Linux Manager Tools SLE-12) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Multi Linux Manager Tools SLE-12 package golang-github-prometheus-alertmanager, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2025-12816 — CVSS 8.6 (high): An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft…
• CVE-2025-6023 — CVSS 7.6 (high): An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was…
• CVE-2025-47908 — CVSS 7.5 (high): Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a…
• CVE-2025-68156 — CVSS 7.5 (high): Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including…
• CVE-2025-3415 — CVSS 4.3 (medium): Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected…
• CVE-2025-6197 — CVSS 4.2 (medium): An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: -…