StackRadar

CVE-2023-40577

Medium

Advisory

Published 23 Aug 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.4
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
95
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
1 of 1
affected package

Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint

Carried by container images the latest versions of 95 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
github.com/prometheus/alertmanagergolangv0.0.0-20221222142419-258fab7cdd55, v0.0.0-20230824073203-d7b4f0c7322e, v0.0.0-20240228113554-0aa3c2aad14c, v0.0.0-20250115100447-4ce04fb010bd+14 more0.25.166
OSV records
GHSA-v86x-5fm3-5p7j
Also known as
BIT-alertmanager-2023-40577, GO-2023-2020

Charts affected

95 by stars
ChartLatestAffected imagesRadar Score
eoapi-supporteoapiVerified publisher0.1.72 of 7See more

eoapi-support eoapi 0.1.7

2 of the 7 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/prometheus/alertmanager@v0.25.0
0.25.1
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

8,648
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

7,617
mimir-openshift-experimentalgrafana2.1.01 of 4See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
github.com/prometheus/alertmanager@v0.23.1-0.20210914172521-e35efbddb66a
0.25.1

Open the chart page →

17,759
prometheusgrafana-uxadax26.0.11 of 6See more

prometheus grafana-uxadax 26.0.1

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/prometheus/alertmanager@v0.0.0-20240228113554-0aa3c2aad14c
0.25.1

Open the chart page →

5,304
logging-stackhelm-charts-alexis-carbillet0.1.02 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

2 of the 9 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
github.com/prometheus/alertmanager@v0.23.1-0.20210914172521-e35efbddb66a
0.25.1
grafana/loki:2.8.2b1da1d23037e
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.26.0361db356b330
github.com/prometheus/alertmanager@v0.0.0-20230824073203-d7b4f0c7322e
0.25.1

Open the chart page →

9,460
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
github.com/prometheus/alertmanager@v0.23.1-0.20211116083607-e2a10119aaf7
0.25.1

Open the chart page →

11,069
alertmanager-irc-relayjuppi880.0.11 of 1See more

alertmanager-irc-relay juppi88 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
maldridge/alertmanager-irc-relay:v0.4.1391de2b76128
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

1,615
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
github.com/prometheus/alertmanager@v0.23.1-0.20210914172521-e35efbddb66a
0.25.1

Open the chart page →

19,168
geminikubeblocksVerified publisher0.13.41 of 8See more

gemini kubeblocks 0.13.4

1 of the 8 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/alertmanager:v0.28.0d5155cfac40a
github.com/prometheus/alertmanager@v0.0.0-20250115100447-4ce04fb010bd
0.25.1

Open the chart page →

3,103
lokikubeblocksVerified publisher5.39.02 of 5See more

loki kubeblocks 5.39.0

2 of the 5 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:2.9.26074e01dbe03
github.com/prometheus/alertmanager@v0.25.0
0.25.1
grafana/loki-canary:2.9.24249db29b992
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

5,841
prometheuskubeblocksVerified publisher15.16.11 of 6See more

prometheus kubeblocks 15.16.1

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

10,302
victoria-metrics-alertkubeblocksVerified publisher0.8.3-reload1 of 3See more

victoria-metrics-alert kubeblocks 0.8.3-reload

1 of the 3 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
github.com/prometheus/alertmanager@v0.0.0-20221222142419-258fab7cdd55
0.25.1

Open the chart page →

3,715
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
github.com/prometheus/alertmanager@v0.21.1-0.20201106142418-c39b78780054
0.25.1

Open the chart page →

2,646
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
github.com/prometheus/alertmanager@v0.20.0
0.25.1

Open the chart page →

14,320
prometheuslectures-k8sinfra15.8.51 of 6See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

9,092
prometheusleechistest11.6.01 of 6See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.19.0bfad037f95e5
github.com/prometheus/alertmanager@v0.20.0
0.25.1

Open the chart page →

8,484
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/alertmanager:v0.28.0d5155cfac40a
github.com/prometheus/alertmanager@v0.0.0-20250115100447-4ce04fb010bd
0.25.1

Open the chart page →

24,400
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

11,689
kommandermesosphere-stable0.39.24 of 29See more

kommander mesosphere-stable 0.39.2

4 of the 29 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.19.2cd134bd4fca0
github.com/prometheus/alertmanager@v0.20.0
0.25.1
thanosio/thanos:v0.19.088276fcd1491
github.com/prometheus/alertmanager@v0.21.1-0.20201106142418-c39b78780054
0.25.1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/prometheus/alertmanager@v0.21.0
0.25.1
quay.io/thanos/thanos:v0.17.1e362f02ed304
github.com/prometheus/alertmanager@v0.21.1-0.20200911160112-1fdff6b3f939
0.25.1

Open the chart page →

68,284
cortexmetakube0.6.01 of 2See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
github.com/prometheus/alertmanager@v0.21.1-0.20210422101724-8176f78a70e1
0.25.1

Open the chart page →

4,107
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
github.com/prometheus/alertmanager@v0.20.0
0.25.1

Open the chart page →

15,855
prometheusnodepulse25.0.03 of 6See more

prometheus nodepulse 25.0.0

3 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/prometheus/alertmanager@v0.25.0
0.25.1
quay.io/prometheus/alertmanager:v0.26.0361db356b330
github.com/prometheus/alertmanager@v0.0.0-20230824073203-d7b4f0c7322e
0.25.1
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

7,740
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/grafana:8.5.3ecc1b80b8ca2
github.com/prometheus/alertmanager@v0.23.1-0.20211116083607-e2a10119aaf7
0.25.1

Open the chart page →

9,558
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/prometheus/alertmanager@v0.18.0
0.25.1

Open the chart page →

4,612
opscruiseopenshift0.35.1002 of 11See more

opscruise openshift 0.35.100

2 of the 11 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:2.0.077e138f81a8e
github.com/prometheus/alertmanager@v0.21.1-0.20200911160112-1fdff6b3f939
0.25.1
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

8,201
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:2.4.2b3af8ead67d7
github.com/prometheus/alertmanager@v0.23.1-0.20210914172521-e35efbddb66a
0.25.1

Open the chart page →

5,708
npre-essentialsphntom0.1.603 of 22See more

npre-essentials phntom 0.1.60

3 of the 22 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
github.com/prometheus/alertmanager@v0.23.1-0.20210914172521-e35efbddb66a
0.25.1
grafana/promtail:2.7.0c16c710f7333
github.com/prometheus/alertmanager@v0.24.0
0.25.1
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

26,840
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:2.5.0f9ef133793af
github.com/prometheus/alertmanager@v0.23.1-0.20210914172521-e35efbddb66a
0.25.1

Open the chart page →

6,525
calertromholdings0.0.11 of 1See more

calert romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

4,648
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/prometheus/alertmanager@v0.22.2
0.25.1

Open the chart page →

8,645
icinga2-masterschmitzis0.2.01 of 6See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/grafana:8.0.3696823fbc561
github.com/prometheus/alertmanager@v0.22.2
0.25.1

Open the chart page →

3,731
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
github.com/prometheus/alertmanager@v0.24.0
0.25.1

Open the chart page →

2,330
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

9,754
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.18.15880ec936055
github.com/prometheus/alertmanager@v0.20.0
0.25.1

Open the chart page →

10,733
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.26.0361db356b330
github.com/prometheus/alertmanager@v0.0.0-20230824073203-d7b4f0c7322e
0.25.1

Open the chart page →

7,708
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/prometheus/alertmanager@v0.0.0-20240228113554-0aa3c2aad14c
0.25.1

Open the chart page →

20,223
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.22.2f7ffebdd428b
github.com/prometheus/alertmanager@v0.21.0
0.25.1

Open the chart page →

16,506
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/alertmanager@v0.25.0
0.25.1

Open the chart page →

10,134
lokit3n1.0.01 of 1See more

loki t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
github.com/prometheus/alertmanager@v0.20.0
0.25.1

Open the chart page →

2,869
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

21,005
monitoringthl-chartsVerified publisher0.1.13 of 10See more

monitoring thl-charts 0.1.1

3 of the 10 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/prometheus/alertmanager@v0.23.1-0.20211116083607-e2a10119aaf7
0.25.1
grafana/loki:2.5.0f9ef133793af
github.com/prometheus/alertmanager@v0.23.1-0.20210914172521-e35efbddb66a
0.25.1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/prometheus/alertmanager@v0.23.0
0.25.1

Open the chart page →

18,908
prometheustnh11.6.01 of 6See more

prometheus tnh 11.6.0

1 of the 6 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.19.0bfad037f95e5
github.com/prometheus/alertmanager@v0.20.0
0.25.1

Open the chart page →

8,484
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/prometheus/alertmanager@v0.18.0
0.25.1

Open the chart page →

22,665
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2023-40577.

Container imageDigestPackageFixed in
prom/alertmanager:v0.28.0d5155cfac40a
github.com/prometheus/alertmanager@v0.0.0-20250115100447-4ce04fb010bd
0.25.1

Open the chart page →

9,381

Container images carrying it

66 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
prom/prometheus:v2.22.2f7ffebdd428b
github.com/prometheus/alertmanager@v0.21.0
0.25.1
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/prometheus/alertmanager@v0.23.0
0.25.1
1
thanosio/thanos:v0.19.088276fcd1491
github.com/prometheus/alertmanager@v0.21.1-0.20201106142418-c39b78780054
0.25.1
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/prometheus/alertmanager@v0.21.0
0.25.1
1
gcr.io/pingcap-public/deadmansswitch:1.04861d81aa528
github.com/prometheus/alertmanager@v0.21.0
0.25.1
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
github.com/prometheus/alertmanager@v0.21.1-0.20210422101724-8176f78a70e1
0.25.1
1
quay.io/kube-ops/loki:2.2.14fbd63194674
github.com/prometheus/alertmanager@v0.21.1-0.20201106142418-c39b78780054
0.25.1
1
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
github.com/prometheus/alertmanager@v0.25.0
0.25.1
1
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
github.com/prometheus/alertmanager@v0.24.0
0.25.1
1
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
github.com/prometheus/alertmanager@v0.23.0
0.25.1
1
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
github.com/prometheus/alertmanager@v0.24.0
0.25.1
1
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/prometheus/alertmanager@v0.24.0
0.25.1
1
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/prometheus/alertmanager@v0.24.0
0.25.1
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/prometheus/alertmanager@v0.23.0
0.25.1
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/prometheus/alertmanager@v0.23.0
0.25.1
1
quay.io/thanos/thanos:v0.17.1e362f02ed304
github.com/prometheus/alertmanager@v0.21.1-0.20200911160112-1fdff6b3f939
0.25.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.