prometheus Latest Vulnerabilities

Latest vulnerabilities published by prometheus

JSON RSS CSV 🔔 Create Alert Trigger

15 April 2026

Stored Cross-Site Scripting Vulnerability in Prometheus Monitoring System
CVE-2026-40179
PrometheusPrometheus5.3MEDIUM

25 August 2023

Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint
CVE-2023-40577
PrometheusAlertmanager7.5HIGH

26 April 2023

Access Control Issue in Blackbox Exporter by Prometheus
CVE-2023-26735
PrometheusBlackbox Exporter7.5HIGH

29 November 2022

Prometheus Exporter Toolkit vulnerable to basic authentication bypass
CVE-2022-46146
PrometheusExporter-toolkit6.2MEDIUM

15 February 2022

Uncontrolled Resource Consumption in promhttp
CVE-2022-21698
PrometheusClient Golang7.5HIGH

19 May 2021

Arbitrary redirects under /new endpoint
CVE-2021-29622
PrometheusPrometheusEPSS 86%6.5MEDIUM

9 August 2020

Server-Side Request Forgery Vulnerability in Prometheus Blackbox Exporter
CVE-2020-16248
PrometheusBlackbox Exporter5.8MEDIUM