AZL-33637 CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.7.10-18

🗓️ 15 Feb 2022 16:15:08Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Denial of service in Prometheus client_golang promhttp InstrumentHandler* before 1.11.1 via nonstandard HTTP methods.

Reporter	Title	Published	Views	Family All 1537
ibm	Security Bulletin: CVE-2022-27664, CVE-2022-21698, CVE-2021-43565 and CVE-2022-27191 may affect IBM CICS TX Standard	29 Mar 202319:03	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:32	–	ibm
ibm	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2022	20 Jun 202213:10	–	ibm
ibm	Security Bulletin: Potential Denial of Service in IBM Storage Defender - Data Protect	11 Nov 202417:51	–	ibm
ibm	Security Bulletin: IBM Storage Fusion is vulnerable to denial of server, and security bypass due to Golang vulnerabilities.	13 May 202418:39	–	ibm
ibm	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
ibm	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
ibm	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from curl, go and apr-util	16 Jun 202304:09	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console (CVE-2023-39325, CVE-2022-21698)	3 Jul 202509:34	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-21698

21 Apr 2026 04:26Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.05994