ROOT-APP-GOBINARY-CVE-2026-42151 CVE-2026-42151 in github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42151 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: metrics-server, jaeger, node-problem-detector, fluent-bit-plugin-loki, certificate-transparency, minio, amazon-cloudwatch-agent-operator, mc, prometheus-operator, grafana, k8sgpt, aws-otel-collector, minio-operator, prometheus-pushgateway, keda, cloud-sql-proxy, loki...

CVE-2026-42151

creationtimestamp| type| source ---|---|--- 2026-05-04 19:28:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2frpcll426 2026-05-07 18:07:47+00:00| seen| https://gist.github.com/cwayne18/c6798b17a9150ada7489927525e07176 2026-05-08 15:28:37+00:00| seen|...

UBUNTU-CVE-2026-42151

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the clientsecret field in the Azure AD remote write OAuth configuration storage/remote/azuread was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving...