StackRadar

CVE-2023-40577

Medium

Advisory

Published 23 Aug 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.4
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
95
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
1 of 1
affected package

Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint

Carried by container images the latest versions of 95 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
github.com/prometheus/alertmanagergolangv0.0.0-20221222142419-258fab7cdd55, v0.0.0-20230824073203-d7b4f0c7322e, v0.0.0-20240228113554-0aa3c2aad14c, v0.0.0-20250115100447-4ce04fb010bd+14 more0.25.166
OSV records
GHSA-v86x-5fm3-5p7j
Also known as
BIT-alertmanager-2023-40577, GO-2023-2020

Charts affected

95 by stars
ChartLatestAffected imagesRadar Score
prometheus-msteamsprometheus-msteams1.3.61 of 1See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

941
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
github.com/prometheus/alertmanager@v0.23.1-0.20210914172521-e35efbddb66a
0.25.1

Open the chart page →

6,470
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

14,893
aperture-controlleraperture2.34.01 of 5See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

4,663
prometheusaveshaVerified publisher19.3.01 of 4See more

prometheus avesha 19.3.0

1 of the 4 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

5,484
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/prometheus/alertmanager@v0.0.0-20240228113554-0aa3c2aad14c
0.25.1

Open the chart page →

24,700
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/prometheus/alertmanager@v0.0.0-20240228113554-0aa3c2aad14c
0.25.1

Open the chart page →

17,693
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

12,125
sn-platformstreamnative1.11.442 of 9See more

sn-platform streamnative 1.11.44

2 of the 9 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
github.com/prometheus/alertmanager@v0.0.0-20221222142419-258fab7cdd55
0.25.1
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

15,477
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
github.com/prometheus/alertmanager@v0.0.0-20221222142419-258fab7cdd55
0.25.1
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

17,877
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

22,202
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220201 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

4,256
cnpg-sandboxcloudnative-pgVerified publisher0.6.12 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

2 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/grafana:8.3.5cd7cb4345aa7
github.com/prometheus/alertmanager@v0.23.1-0.20211116083607-e2a10119aaf7
0.25.1
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

7,583
revadcs3orgOfficialVerified publisher1.6.11 of 1See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

1,704
cubefscubefs3.2.01 of 10See more

cubefs cubefs 3.2.0

1 of the 10 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/prometheus/alertmanager@v0.18.0
0.25.1

Open the chart page →

15,891
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

10,454
alertmanager-botgeek-cookbookVerified publisher6.4.21 of 1See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
github.com/prometheus/alertmanager@v0.9.1
0.25.1

Open the chart page →

3,586
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/prometheus/alertmanager@v0.0.0-20240228113554-0aa3c2aad14c
0.25.1

Open the chart page →

16,346
phlaregrafana0.5.41 of 1See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/phlare:0.5.1330f990cdad9
github.com/prometheus/alertmanager@v0.25.0-rc.0.0.20221216141313-26cbd6bd862e
0.25.1

Open the chart page →

2,084
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/prometheus/alertmanager@v0.23.1-0.20211116083607-e2a10119aaf7
0.25.1

Open the chart page →

13,610
logclilogcliVerified publisher0.1.01 of 1See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/logcli:main-c90366d-amd643d85bb66e39b
github.com/prometheus/alertmanager@v0.21.1-0.20210422101724-8176f78a70e1
0.25.1

Open the chart page →

2,947
voice-biometricslumenvox2.0.11 of 26See more

voice-biometrics lumenvox 2.0.1

1 of the 26 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

70,741
prometheusprometheus-worawutchan13.0.01 of 6See more

prometheus prometheus-worawutchan 13.0.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

9,939
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
github.com/prometheus/alertmanager@v0.23.1-0.20211116083607-e2a10119aaf7
0.25.1

Open the chart page →

2,835
scienceboxsciencebox0.0.71 of 17See more

sciencebox sciencebox 0.0.7

1 of the 17 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

6,587
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

4,052
vearchvearch3.3.41 of 4See more

vearch vearch 3.3.4

1 of the 4 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/prometheus/alertmanager@v0.18.0
0.25.1

Open the chart page →

5,008
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

1,716
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

25,669
arma-reforgerarma-reforger0.5.32 of 8See more

arma-reforger arma-reforger 0.5.3

2 of the 8 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
github.com/prometheus/alertmanager@v0.0.0-20221222142419-258fab7cdd55
0.25.1
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

23,353
itera-lmaarzu1.34.602 of 6See more

itera-lma arzu 1.34.60

2 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/grafana:9.0.1a738d0744784
github.com/prometheus/alertmanager@v0.23.1-0.20211116083607-e2a10119aaf7
0.25.1
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

8,608
performanceandusagediagnosisassist-iot-pud1.0.02 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

2 of the 7 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
github.com/prometheus/alertmanager@v0.23.1-0.20211116083607-e2a10119aaf7
0.25.1
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

8,556
appmesh-prometheusaws1.0.31 of 2See more

appmesh-prometheus aws 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/prometheus/alertmanager@v0.18.0
0.25.1

Open the chart page →

2,939
keptn-addonsazureorkestra0.1.01 of 4See more

keptn-addons azureorkestra 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
keptncontrib/prometheus-service:0.6.029969dd547de
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

10,621
prometheusazureorkestra14.8.01 of 6See more

prometheus azureorkestra 14.8.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

9,661
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/prometheus/alertmanager@v0.0.0-20240228113554-0aa3c2aad14c
0.25.1

Open the chart page →

5,304
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/prometheus/alertmanager@v0.0.0-20240228113554-0aa3c2aad14c
0.25.1

Open the chart page →

16,198
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
github.com/prometheus/alertmanager@v0.20.0
0.25.1

Open the chart page →

2,869
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/prometheus/alertmanager@v0.18.0
0.25.1

Open the chart page →

3,595
calertdevtron0.0.11 of 1See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

4,648
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/prometheus/alertmanager@v0.22.2
0.25.1

Open the chart page →

8,645
calertdevtron-labs0.0.11 of 1See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

4,648
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/prometheus/alertmanager@v0.22.2
0.25.1

Open the chart page →

8,645
channelsdoubanVerified publisher1.1.21 of 1See more

channels douban 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
everpcpc/channels:latestb378d137ae8b
github.com/prometheus/alertmanager@v0.22.2
0.25.1

Open the chart page →

2,539
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

20,205
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/prometheus/alertmanager@v0.0.0-20240228113554-0aa3c2aad14c
0.25.1

Open the chart page →

6,678
prometheusedu11.6.01 of 6See more

prometheus edu 11.6.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.19.0bfad037f95e5
github.com/prometheus/alertmanager@v0.20.0
0.25.1

Open the chart page →

8,484
deadman-switchempathyco0.0.21 of 1See more

deadman-switch empathyco 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
gcr.io/pingcap-public/deadmansswitch:1.04861d81aa528
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

1,258
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
emqx/ecp-main:2.5.1fa876f71e5d6
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

23,685

Container images carrying it

66 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
prom/prometheus:v2.22.2f7ffebdd428b
github.com/prometheus/alertmanager@v0.21.0
0.25.1
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/prometheus/alertmanager@v0.23.0
0.25.1
1
thanosio/thanos:v0.19.088276fcd1491
github.com/prometheus/alertmanager@v0.21.1-0.20201106142418-c39b78780054
0.25.1
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/prometheus/alertmanager@v0.21.0
0.25.1
1
gcr.io/pingcap-public/deadmansswitch:1.04861d81aa528
github.com/prometheus/alertmanager@v0.21.0
0.25.1
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
github.com/prometheus/alertmanager@v0.21.1-0.20210422101724-8176f78a70e1
0.25.1
1
quay.io/kube-ops/loki:2.2.14fbd63194674
github.com/prometheus/alertmanager@v0.21.1-0.20201106142418-c39b78780054
0.25.1
1
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
github.com/prometheus/alertmanager@v0.25.0
0.25.1
1
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
github.com/prometheus/alertmanager@v0.24.0
0.25.1
1
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
github.com/prometheus/alertmanager@v0.23.0
0.25.1
1
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
github.com/prometheus/alertmanager@v0.24.0
0.25.1
1
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/prometheus/alertmanager@v0.24.0
0.25.1
1
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/prometheus/alertmanager@v0.24.0
0.25.1
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/prometheus/alertmanager@v0.23.0
0.25.1
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/prometheus/alertmanager@v0.23.0
0.25.1
1
quay.io/thanos/thanos:v0.17.1e362f02ed304
github.com/prometheus/alertmanager@v0.21.1-0.20200911160112-1fdff6b3f939
0.25.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.