node-exporter
Technical details about the ’node-exporter’ component.
Generated on: 2026-10-23
Software Bill of Materials
Dependencies (Image)
| Dependency | Version | License | Vulnerabilities | Severity | Status |
|---|---|---|---|---|---|
| github.com/opencontainers/selinux | v1.11.0 | Unknown | CVE-2025-52881 (runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects) | HIGH | fixed (in 1.13.0) |
| golang.org/x/crypto | v0.21.0 | Unknown | CVE-2024-45337 (golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto) | HIGH | fixed (in 0.31.0) |
| golang.org/x/net | v0.23.0 | Unknown | CVE-2024-45338 (golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html) | HIGH | fixed (in 0.33.0) |
| golang.org/x/oauth2 | v0.18.0 | Unknown | CVE-2025-22868 (golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws) | HIGH | fixed (in 0.27.0) |
| golang.org/x/text | v0.14.0 | Unknown | CVE-2026-56851 (golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile) | HIGH | fixed (in 0.41.0) |
| busybox | 1.36.1 | Unknown | - | ||
| github.com/alecthomas/kingpin/v2 | v2.4.0 | Unknown | - | ||
| github.com/alecthomas/units | v0.0.0-20211218093645-b94a6e3cc137 | Unknown | - | ||
| github.com/beevik/ntp | v1.3.1 | Unknown | - | ||
| github.com/beorn7/perks | v1.0.1 | Unknown | - | ||
| github.com/cespare/xxhash/v2 | v2.2.0 | Unknown | - | ||
| github.com/coreos/go-systemd/v22 | v22.5.0 | Unknown | - | ||
| github.com/dennwc/btrfs | v0.0.0-20240418142341-0167142bde7a | Unknown | - | ||
| github.com/dennwc/ioctl | v1.0.0 | Unknown | - | ||
| github.com/ema/qdisc | v1.0.0 | Unknown | - | ||
| github.com/go-kit/log | v0.2.1 | Unknown | - | ||
| github.com/go-logfmt/logfmt | v0.5.1 | Unknown | - | ||
| github.com/godbus/dbus/v5 | v5.1.0 | Unknown | - | ||
| github.com/hashicorp/go-envparse | v0.1.0 | Unknown | - | ||
| github.com/hodgesds/perf-utils | v0.7.0 | Unknown | - | ||
| github.com/josharian/native | v1.1.0 | Unknown | - | ||
| github.com/jpillora/backoff | v1.0.0 | Unknown | - | ||
| github.com/jsimonetti/rtnetlink | v1.4.1 | Unknown | - | ||
| github.com/mattn/go-xmlrpc | v0.0.3 | Unknown | - | ||
| github.com/mdlayher/ethtool | v0.1.0 | Unknown | - | ||
| github.com/mdlayher/genetlink | v1.3.2 | Unknown | - | ||
| github.com/mdlayher/netlink | v1.7.2 | Unknown | - | ||
| github.com/mdlayher/socket | v0.4.1 | Unknown | - | ||
| github.com/mdlayher/wifi | v0.1.0 | Unknown | - | ||
| github.com/mwitkow/go-conntrack | v0.0.0-20190716064945-2f068394615f | Unknown | - | ||
| github.com/prometheus-community/go-runit | v0.1.0 | Unknown | - | ||
| github.com/prometheus/client_golang | v1.19.0 | Unknown | - | ||
| github.com/prometheus/client_model | v0.6.1 | Unknown | - | ||
| github.com/prometheus/common | v0.53.0 | Unknown | - | ||
| github.com/prometheus/exporter-toolkit | v0.11.0 | Unknown | - | ||
| github.com/prometheus/node_exporter | v0.0.0-20240521183432-400c39799316 | Unknown | - | ||
| github.com/prometheus/procfs | v0.14.0 | Unknown | - | ||
| github.com/safchain/ethtool | v0.3.0 | Unknown | - | ||
| github.com/xhit/go-str2duration/v2 | v2.1.0 | Unknown | - | ||
| go.uber.org/atomic | v1.7.0 | Unknown | - | ||
| go.uber.org/multierr | v1.6.0 | Unknown | - | ||
| golang.org/x/exp | v0.0.0-20240416160154-fe59bbe5cc7f | Unknown | - | ||
| golang.org/x/sync | v0.7.0 | Unknown | - | ||
| golang.org/x/sys | v0.19.0 | Unknown | CVE-2026-39824 (Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows) | UNKNOWN | fixed (in 0.44.0) |
| google.golang.org/protobuf | v1.33.0 | Unknown | - | ||
| gopkg.in/yaml.v2 | v2.4.0 | Unknown | - | ||
| stdlib | go1.22.3 | BSD-3-Clause | - | ||
| busybox | 1.36.1 | Unknown | - | ||
| /bin/[ | Unknown | Unknown | - | ||
| /bin/node_exporter | Unknown | Unknown | - |