Prometheus security vulnerabilities
Open-source infrastructure. Public CVE monitoring for Prometheus. Vendor security advisories are linked on this page.
Built for Operators of this product.
14 public records · 0 security-fix timeline events. 0 published in the last 7 days. 11 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 1
- Medium 1
- Low 0
2026-08-082 issues2026-11-05
Known exploited
View all known exploitedNo records match this view.
Recently published
Browse catalog- Medium6.5The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the servCheck if you run itEPSS 0.37%Oct 13, 2026
- High8.1Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 10, 2026
- Medium5.1Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.20%May 26, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.35%May 4, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.81%Apr 27, 2026
- Medium5.3Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.31%Apr 15, 2026
- Medium5.7Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.19%Mar 19, 2026
- High8.8openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.Check if you run itEPSS 0.92%Feb 20, 2026
- High7.5openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.Check if you run itEPSS 0.42%Feb 20, 2026
- Critical9.1Scraparr is a Prometheus Exporter for various components of the *arr Suite.Check if you run itEPSS 0.34%Feb 12, 2026