HIGH7.5CVE-2026-42154Prometheus: remote read endpoint allows denial of service via crafted snappy payload >= 0.306.0, < 0.311.3
HIGH7.5CVE-2026-42154Prometheus: remote read endpoint allows denial of service via crafted snappy payload from 0, < 0.305.2, >= 0.306.0, < 0.311.3, >= 1.0.0-rc.0
HIGH7.5CVE-2026-42151Prometheus Azure AD remote write OAuth client secret exposed via config API >= 0.45.2, < 0.311.3
HIGH7.5Prometheus Azure AD remote write OAuth client secret exposed via config API
>= 0.45.2, < 0.311.3
MEDIUM6.1Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
>= 3.0.0, <= 3.5.1
MEDIUM6.1Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
from 0, < 0.311.2-0.20260410083055-07c6232d159b
MEDIUM6.1Arbitrary redirects under /new endpoint
>= 2.23.0, < 2.26.1