ROOT-APP-GOBINARY-CVE-2026-42151 CVE-2026-42151 in rootio-github.com/prometheus/prometheus - Patched by Root

Root has patched CVE-2026-42151 in the rootio-github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: minio, minio-operator, datadog-agent, cloud-sql-proxy, loki, prometheus-pushgateway, node-problem-detector, istio, amazon-cloudwatch-agent-operator, opentelemetry-collector, aws-otel-collector, mc, keda, tempo, metrics-server, certificate-transparency, karma,...

CVE-2026-42151

creationtimestamp| type| source ---|---|--- 2026-05-04 19:28:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2frpcll426 2026-05-07 18:07:47+00:00| seen| https://gist.github.com/cwayne18/c6798b17a9150ada7489927525e07176 2026-05-08 15:28:37+00:00| seen|...

UBUNTU-CVE-2026-42151

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the clientsecret field in the Azure AD remote write OAuth configuration storage/remote/azuread was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving...