Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpo

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret fie

Prometheus is an open-source monitoring system and time series database. Versions 3.0 through 3.5.1 and 3.6.0 through 3.11.1 have

Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform

blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows atta

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a

client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides

Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New u

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausi

A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this

Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that point