Issues

provider watchdog: 5s stall tolerance + unconditional os.Exit(4) turns every slow resolver into a scan-corrupting crash

#3543

· jaym opened

on Aug 21, 2026

cnspec serve does not reload mondoo.yml or inventory.yml without a restart

enhancement

#3527

· tas50 opened

on Aug 18, 2026

Nine version checks compare versions as strings, so each breaks at major version 10

#3513

· tas50 opened

on Aug 18, 2026

Search and cloud DB policies: Elasticsearch anonymous-access passes on a cluster with security disabled, and Netlify MFA passes when the field is absent

#3489

· tas50 opened

on Aug 17, 2026

OS policies: the SNMP v3 file check fails every non-Debian host, and the LUKS cipher check accepts aes-cbc through its fallback

#3488

· tas50 opened

on Aug 17, 2026

mondoo-m365-security: five Secure Score checks pass vacuously on an unlicensed tenant, two checks contradict each other, plus Google Workspace and Slack findings

#3486

· tas50 opened

on Aug 17, 2026

mondoo-dns-security: following the Google Workspace MX remediation makes the check pass vacuously, because its selector regex is case-sensitive

#3485

· tas50 opened

on Aug 17, 2026

PostgreSQL/MSSQL/MongoDB/Redis: Redis auth passes on any scan without +acl, two MSSQL checks always fail on Linux, and two MongoDB checks are the same assertion

#3484

· tas50 opened

on Aug 17, 2026

mondoo-vllm-security / mondoo-grafana-security: the vLLM version check fails open where its siblings fail closed, and TLS is tested against the scanner's own URL

#3483

· tas50 opened

on Aug 17, 2026

mondoo-mariadb-security / mondoo-mysql-security: both Galera checks pass vacuously on a real cluster, and three checks pass because an absent option reads as false

#3477

· tas50 opened

on Aug 17, 2026

mondoo-proxmox-security / mondoo-nutanix-security: the corosync encryption check passes on every PVE 6+ cluster, and Spectre mitigations pass on a VM that has none

#3475

· tas50 opened

on Aug 17, 2026

mondoo-vmware-vsphere-esxi: two lockdown checks are mutually exclusive so every host fails one, and the NTP check passes when no time service exists

#3473

· tas50 opened

on Aug 17, 2026

Navigation Menu

Uh oh!

All issues

provider watchdog: 5s stall tolerance + unconditional os.Exit(4) turns every slow resolver into a scan-corrupting crash

cnspec serve does not reload mondoo.yml or inventory.yml without a restart

Nine version checks compare versions as strings, so each breaks at major version 10

Search and cloud DB policies: Elasticsearch anonymous-access passes on a cluster with security disabled, and Netlify MFA passes when the field is absent

OS policies: the SNMP v3 file check fails every non-Debian host, and the LUKS cipher check accepts aes-cbc through its fallback

mondoo-m365-security: five Secure Score checks pass vacuously on an unlicensed tenant, two checks contradict each other, plus Google Workspace and Slack findings

mondoo-dns-security: following the Google Workspace MX remediation makes the check pass vacuously, because its selector regex is case-sensitive

PostgreSQL/MSSQL/MongoDB/Redis: Redis auth passes on any scan without +acl, two MSSQL checks always fail on Linux, and two MongoDB checks are the same assertion

mondoo-vllm-security / mondoo-grafana-security: the vLLM version check fails open where its siblings fail closed, and TLS is tested against the scanner's own URL

mondoo-mariadb-security / mondoo-mysql-security: both Galera checks pass vacuously on a real cluster, and three checks pass because an absent option reads as false

mondoo-proxmox-security / mondoo-nutanix-security: the corosync encryption check passes on every PVE 6+ cluster, and Spectre mitigations pass on a VM that has none

mondoo-vmware-vsphere-esxi: two lockdown checks are mutually exclusive so every host fails one, and the NTP check passes when no time service exists

Uh oh!

Search results