Advisoriesby Ibis
prometheus security advisories
5 advisories · 2 critical or high in 12 months · latest May 5
5 advisories
prometheus: cross-site scriptingCVE-2026-44903fixed in 0.311.3Prometheus: Remote read endpoint allows denial of service via crafted snappy payloadCVE-2026-42154fixed in 0.305.2 +1Prometheus Azure AD remote write OAuth client secret exposed via config APICVE-2026-42151fixed in 0.311.3Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorerCVE-2026-40179fixed in 0.311.2-0.20260410083055-07c6232d159b +2Prometheus vulnerable to basic authentication bypassGHSA-4v48-4q5m-8vx4fixed in 2.37.4 +1About prometheus
The Prometheus monitoring system and time series database.
Packages watched: github.com/prometheus/prometheus (Go).