BIT-PROMETHEUS-2026-42154 Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...

Prometheus 资源管理错误漏洞

Prometheus is an open-source software developed in the Go language, used to create time-series databases that utilize the HTTP pull model. There were resource management vulnerabilities in versions of Prometheus prior to 3.5.3 and 3.11.3. These vulnerabilities stemmed from the fact that remote...