Package · Debian

prometheus

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.1

CVE-2026-44903

Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI

Prometheus is an open-source monitoring system and time series database. From 2.49.0 to before 3.5.3 and 3.11.3, in the Prometheus server's legacy web UI (enabled via the command-line flag --enable-feature=old-ui), the histogram heatmap chart view does not es…

prometheus prometheus prometheus github.com/prometheus/prometheus Debian Ubuntu Go

May 26, 2026
Medium 6.1

CVE-2019-3826

A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could ex…

[UNKNOWN] prometheus prometheus prometheus Debian Ubuntu

Mar 26, 2019