Skip to content
OpenAdvisories

Package · SwiftURL

github.com/swift-server/swift-prometheus

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.9
    CVE-2024-28867

    Swift Prometheus un-sanitized metric name or labels can be used to take over exported metrics

    Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies _un-sanitized string values into metric names or labels_, an attacker could make use of this and send a `?lang` query pa…

    swift-server swift-prometheus github.com/swift-server/swift-prometheus SwiftURL