Fedora 43 : prometheus (2026-4179e03375)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4179e03375 advisory. Update to 3.13.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 44 : prometheus (2026-01a1840582)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-01a1840582 advisory. Update to 3.13.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Prometheus Detection

Detects Prometheus /metrics and status API exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed Prometheus monitoring endpoints.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Prometheus Detection",...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: libnvidia-container, knative-operator-fips, kubeflow-katib, flux-fips, glab, cluster-api, undock, gitlab-rails-ce, langfuse, fuse-overlayfs-snapshotter, vault-secrets-operator, opentofu-fips, falco-no-driver, cilium-cli, dapr, dataplaneapi,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, smokescreen, fuse-overlayfs-snapshotter, argo-rollouts, kor, newrelic-nri-statsd, aws-network-policy-agent,...

CLEANSTART-2026-OI68686 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2

Multiple security vulnerabilities affect the nginx-prometheus-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IV00591 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.5.1-r0, 1.5.1-r1

Multiple security vulnerabilities affect the nginx-prometheus-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OF83437 Security fixes for CVE-2024-24786, CVE-2024-35255, CVE-2025-22868, CVE-2025-30204, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-42504, CVE-2026-42507, CVE-2026-44903, CVE-2026-46598, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 0.69.1-r0, 0.69.1-r1, 0.69.1-r2, 0.69.1-r3, 0.87.1-r0, 0.89.0-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XN78570 Security fixes for CVE-2026-42504 applied in versions: 3.11.3-r2

Security vulnerability affects the prometheus package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RV88159 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 3.5.3-r2

Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OE40076 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 0.88.1-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PC73667 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 0.89.0-r2

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HF59239 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 0.90.1-r1

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JW89909 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 0.91.0-r1

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

aioimdb (>=1.0.5, <=1.1.2), auto-dl (0.1.1) +11 more potentially affected by CVE-2026-59890 via setuptools (39.0.1)

setuptools PYPI version 39.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aioimdb =1.0.5, =0.2.0b0, =1.1.0, =0.2.1, =0.0.2, =1.1.0rc0, =0.1.3, =0.2.6.1 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3...

github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint

A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint /api/v1/read by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service DoS...

github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API

A flaw was found in Prometheus, an open-source monitoring system. The clientsecret field within the Azure Active Directory AD remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access t...

mlagents (0.4.0), py-grpc-prometheus (0.0.2) +3 more potentially affected by CVE-2026-0994 via protobuf (3.5.2)

protobuf PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - mlagents 0.4.0 - py-grpc-prometheus 0.0.2 - pythongrpckit 0.0.3 - pythonkit =0.0.2, =0.0.3 - unityagents 0.4.0 Source cves: CVE-2026-0994 Source...

mlagents (0.4.0), py-grpc-prometheus (0.0.2) +3 more potentially affected by CVE-2025-4565 via protobuf (3.5.2)

protobuf PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - mlagents 0.4.0 - py-grpc-prometheus 0.0.2 - pythongrpckit 0.0.3 - pythonkit =0.0.2, =0.0.3 - unityagents 0.4.0 Source cves: CVE-2025-4565 Source...

zhmc-prometheus-exporter (0.6.1), zhmccli (0.21.2) potentially affected by CVE-2024-53865 via zhmcclient (0.30.2)

zhmcclient PYPI version 0.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on zhmcclient and may be impacted: - zhmc-prometheus-exporter 0.6.1 - zhmccli 0.21.2 Source cves: CVE-2024-53865 Source advisory: OSV:PYSEC-2026-2073...