The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler times out and stops listening for the result, so that goroutine blocks forever trying to send on an unbuffered channel. Sustained traffic with random hashes keeps tripping this timeout, so goroutine count grows linearly, eventually exhausting memory and causing Grafana to crash on some systems.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade golang-github-prometheus-promuUpgrade golang-github-boynux-squid_exporterUpgrade golang-github-lusitaniae-apache_exporterUpgrade spacecmdUpgrade golang-github-qubitproducts-exporter_exporterUpgrade dracut-saltbootUpgrade grafanaUpgrade prometheus-blackbox_exporter | Mar 27, 2026 | Mar 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub