Read the docs

prometheus

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

prometheus records in CISA KEV

No prometheus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Prometheus 6 records MEDIUM Blackbox Exporter 2 records HIGH Alertmanager 1 record MEDIUM Client Golang 1 record MEDIUM Exporter Toolkit 1 record MEDIUM

Records

1 record in Client Golang · all components

TI-2022-06074 CVE-2022-21698 · GHSA-cg3q-j54f-5p7p

Uncontrolled Resource Consumption in promhttp

Priority MEDIUM 48

client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05994 Published 2022-02-15 Partial fix · 1.11.1 CWE-400
Open these records in search →