Skip to content
OpenAdvisories

Package · Go

github.com/prometheus/prometheus

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-44903

    Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI

    Prometheus is an open-source monitoring system and time series database. From 2.49.0 to before 3.5.3 and 3.11.3, in the Prometheus server's legacy web UI (enabled via the command-line flag --enable-feature=old-ui), the histogram heatmap chart view does not es…

    prometheus prometheus prometheus github.com/prometheus/prometheus Debian Ubuntu Go
  • Medium 5.3
    CVE-2026-40179 Public exploit

    Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer

    Prometheus is an open-source monitoring system and time series database. Versions 3.0 through 3.5.1 and 3.6.0 through 3.11.1 have stored cross-site scripting vulnerabilities in multiple components of the Prometheus web UI where metric names and label values a…

    prometheus prometheus prometheus github.com/prometheus/prometheus Ubuntu Alpine Go