CLEANSTART-2026-WA17635 Security fixes in prometheus-pushgateway 1.10.0-r1

Package prometheus-pushgateway version 1.10.0-r1 fixes 4 vulnerabilities: CVE-2025-22868, CVE-2026-40179, CVE-2026-56852, CVE-2026-39824...

CVE-2026-40179

creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:06+00:00| seen| https://t.me/GithubRedTeam/98742 2026-08-23 00:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/98742 2026-08-26 22:40:13+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mtzfndghin24...

CLEANSTART-2026-AT48963 Security fixes in keda-fips 2.19.0-r2

Package keda-fips version 2.19.0-r2 fixes 8 vulnerabilities: CVE-2026-42151, CVE-2026-42154, CVE-2026-40179, CVE-2026-44903, ghsa-8rm2-7qqf-34qm...

CLEANSTART-2026-DP89496 Security fixes in elastic-beats 9.4.0-r1

Package elastic-beats version 9.4.0-r1 fixes 7 vulnerabilities: CVE-2026-42151, CVE-2026-42154, CVE-2026-40179, ghsa-fw8g-cg8f-9j28, ghsa-8rm2-7qqf-34qm...

CLEANSTART-2026-XN09196 Security fixes in istio 1.29.2-r0

Package istio version 1.29.2-r0 fixes 2 vulnerabilities: ghsa-vffh-x6r8-xx99, CVE-2026-40179...

CLEANSTART-2026-OX06093 Security fixes for CVE-2025-54410, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42499, CVE-2026-42501, ghsa-4vq8-7jfc-9cvp, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 8.18.1-r0, 8.19.15-r0, 8.19.15-r2, 8.19.15-r3, 9.1.10-r0

Multiple security vulnerabilities affect the elastic-beats package. These issues are resolved in later releases. See references for individual vulnerability details...

golang-github-prometheus-prometheus-3.11.2-1.1 on GA media (moderate)

golang-github-prometheus-prometheus-3.11.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10607-1 Rating: moderate Cross-References: CVE-2026-40179 CVSS scores: CVE-2026-40179 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2026-40179 SUSE : 5.3...

CVE-2026-40179

Prometheus is an open-source monitoring system and time series database. Versions 3.0 through 3.5.1 and 3.6.0 through 3.11.1 have stored cross-site scripting vulnerabilities in multiple components of the Prometheus web UI where metric names and label values are injected into innerHTML without...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: jaeger, cloudzero-agent, grafana-pyroscope, minio-operator, tempo-fips, elastic-agent-fips, grafana, grafana-fips, prometheus, nrdot-collector, prometheus-pushgateway, keda, minio-fips, beats-fips, tempo, aws-otel-collector, mc, splunk-otel-collector,...