Denial-of-service (DoS)

github.com/prometheus/prometheus is vulnerable to Denial-of-service DoS. The vulnerability is due to improper validation of the declared decoded length in snappy-compressed requests sent to the remote read endpoint /api/v1/read, which allows an unauthenticated attacker to send a small malicious...

ALPINE-CVE-2026-42154

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...