ROOT-APP-GOBINARY-CVE-2026-42151 CVE-2026-42151 in github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42151 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, trillian, certificate-transparency, loki, minio-operator, datadog-agent, opentelemetry-collector, karma, metrics-server, tempo, grafana, prometheus-pushgateway, jaeger, node-problem-detector, prometheus, keda, minio, fluent-bit-plugin-loki,...

CVE-2026-42151

creationtimestamp| type| source ---|---|--- 2026-05-04 19:28:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2frpcll426 2026-05-07 18:07:47+00:00| seen| https://gist.github.com/cwayne18/c6798b17a9150ada7489927525e07176 2026-05-08 15:28:37+00:00| seen|...

UBUNTU-CVE-2026-42151

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the clientsecret field in the Azure AD remote write OAuth configuration storage/remote/azuread was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving...