Package · Debian

golang-github-prometheus-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 4.8

CVE-2026-119566

Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects

Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google IAM bearer tokens by redirecting remote_write requests to another host. Attackers controlling the remote-write endpoint or a redirecting ser…

prometheus prometheus golang-github-prometheus-common golang-github-prometheus-common Debian Ubuntu

Oct 30, 2026