StackRadar

CVE-2026-40179

Medium

Advisory

Published 13 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
258
of 17,781 indexed, latest versions
Container images
258
deployed by those charts
Fix available
2 of 2
affected packages

Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 258 images.

Affected packageAffected versionsFixed inImages
github.com/prometheus/prometheusgolangv0.0.0-20200213233353-b90be6f32a33, v0.0.0-20200326161412-ae041f97cfc6, v0.0.0-20200609090129-a6600f564e3c, v0.0.0-20220620125440-d7e7b8e04b5e+89 more0.311.2-0.20260410083055-07c6232d159b258
prometheusbitnami2.54.1-20.305.21
OSV records
BIT-prometheus-2026-40179GHSA-vffh-x6r8-xx99
Also known as
GO-2026-5662

Charts affected

258 by stars
ChartLatestAffected imagesRadar Score
prometheusprometheus-communityOfficialVerified publisher29.29.01 of 6See more

prometheus prometheus-community 29.29.0

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

458
kedakedacore2.20.22 of 3See more

keda kedacore 2.20.2

2 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

873
mimir-distributedgrafana6.2.02 of 6See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,517
openebsopenebsOfficialVerified publisher4.6.14 of 35See more

openebs openebs 4.6.1

4 of the 35 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

23,894
netdatanetdataVerified publisher3.7.1731 of 1See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.0c45c71eb23ff
github.com/prometheus/prometheus@v0.302.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,092
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
github.com/prometheus/prometheus@v0.35.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,955
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,483
openfaasopenfaas15.0.131 of 6See more

openfaas openfaas 15.0.13

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,543
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/prometheus/prometheus@v0.0.0-20231115233233-6d80b30990bc
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,367
signozsignoz0.141.11 of 5See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
github.com/prometheus/prometheus@v0.309.2-0.20260113170727-c7bc56cf6c8f
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,568
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

9,864
miniocloudpirates-minioVerified publisher0.13.41 of 1See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,157
operatorminio-operator7.1.11 of 1See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/minio/operator:v7.1.1cd587f60c43d
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

874
thanosthanos-communityOfficialVerified publisher0.43.01 of 1See more

thanos thanos-community 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

196
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

16,251
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
github.com/prometheus/prometheus@v0.42.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,556
linkerd-jaegerlinkerd2Verified publisher30.12.111 of 4See more

linkerd-jaeger linkerd2 30.12.11

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/prometheus/prometheus@v0.37.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,405
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
github.com/prometheus/prometheus@v0.0.0-20231208092246-63894216648f
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,346
plane-cemakeplaneOfficialVerified publisher1.8.12 of 11See more

plane-ce makeplane 1.8.1

2 of the 11 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,854
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,670
prometheus-operatorarldkaVerified publisher13.0.11 of 2See more

prometheus-operator arldka 13.0.1

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,107
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,775
thanosstevehipwellVerified publisher1.24.11 of 1See more

thanos stevehipwell 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

196
ilumilumOfficialVerified publisher6.7.32 of 19See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b
minio/mc:RELEASE.2025-04-16T18-13-26Zaead63c77f9d
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

23,228
pyrrarlex0.14.31 of 1See more

pyrra rlex 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
github.com/prometheus/prometheus@v0.300.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

953
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
github.com/prometheus/prometheus@v0.307.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,039
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
github.com/prometheus/prometheus@v0.43.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,630
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.21.18577eb292a01
github.com/prometheus/prometheus@v0.308.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,897
pmmpercona1.9.11 of 1See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
percona/pmm-server:3.9.1003f9c25f842
github.com/prometheus/prometheus@v0.305.3
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

790
rekorsigstoreVerified publisher1.8.52 of 9See more

rekor sigstore 1.8.5

2 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,415
thehivestrangebee-helmOfficialVerified publisher1.0.62 of 7See more

thehive strangebee-helm 1.0.6

2 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

16,210
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,795
venti-stackkuossOfficialVerified publisher0.5.03 of 9See more

venti-stack kuoss 0.5.0

3 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
github.com/prometheus/prometheus@v0.305.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
github.com/prometheus/prometheus@v0.0.0-20260730110445-bb5dff00cf8f+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,808
fulciosigstoreVerified publisher2.11.11 of 6See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,490
aperture-controlleraperture2.34.01 of 5See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
fluxninja/aperture-operator:2.34.0356d7aa86632
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,663
prometheusaveshaVerified publisher19.3.01 of 4See more

prometheus avesha 19.3.0

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,484
coder-observabilitycoder-observabilityVerified publisher0.7.35 of 21See more

coder-observability coder-observability 0.7.3

5 of the 21 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:10.4.19a9043254ba16
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
grafana/loki:3.1.0d947e68a84d9
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:3.1.039baf6d67f85
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
github.com/prometheus/prometheus@v0.0.0-20240710101407-14cfec3f6048
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

24,700
cosmocosmo-platformOfficialVerified publisher0.20.02 of 10See more

cosmo cosmo-platform 0.20.0

2 of the 10 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
github.com/prometheus/prometheus@v0.51.2-0.20240405174432-b4a973753c6e
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

28,839
monitoring-stackhaukitechVerified publisher0.1.111 of 3See more

monitoring-stack haukitech 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.77.1dde69a8b6f4b
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,164
prometheus-operatorhaukitechVerified publisher0.1.41 of 1See more

prometheus-operator haukitech 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.77.1dde69a8b6f4b
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

561
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
instill/api-gateway:9bfdc88b53eaa51c523
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

30,816
vcluster-platformloftVerified publisher4.12.01 of 1See more

vcluster-platform loft 4.12.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

744
kubecostmesosphere-stable0.37.53 of 9See more

kubecost mesosphere-stable 0.37.5

3 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.69.17bbe804260f3
github.com/prometheus/prometheus@v0.47.2
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/prometheus/prometheus@v0.0.0-20241022105352-91d80252c3e5
0.311.2-0.20260410083055-07c6232d159b
quay.io/thanos/thanos:v0.36.1e542959e1b36
github.com/prometheus/prometheus@v0.52.2-0.20240614130246-4c1e71fa0b3d
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

17,693
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

13,521
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,055
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/prometheus@v0.0.0-20230321125236-edfc3bcd025d
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

15,477
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,619
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,819
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

17,877

Container images carrying it

258 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:latest:v3.14.05ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b
18
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
16
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
8
minio/mc:latest:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b
6
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
4
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
4
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/grafana:11.0.00dc5a246ab16
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/grafana:11.3.0a0f881232a6f
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/loki:3.4.258a6c186ce78
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
3
prom/prometheus:v3.0.1565ee8650122
github.com/prometheus/prometheus@v0.0.0-20241128171232-1f56e8492c31
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/trillian_log_server5a878e4e4f03
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/trillian_log_signer28c5ff40963f
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/prometheus/prometheus@v0.0.0-20241022105352-91d80252c3e5
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/prometheus/prometheus@v0.0.0-20260225185413-54e010926b0a+dirty
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/prometheus@v0.0.0-20230321125236-edfc3bcd025d
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b
3
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.1.0079600c9517b
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.3.12175aaa91c96
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.1.4886b56d5534e
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.3.39e1e77ade304
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.4.0d8ea37798ccc
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/loki:3.1.0d947e68a84d9
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
2
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.52.05c435642ca4d
github.com/prometheus/prometheus@v0.0.0-20240508213442-879d80922a22
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.37.98176adea328e
github.com/prometheus/prometheus@v0.0.0-20230728154742-f6edd518775c
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/prometheus/prometheus@v0.0.0-20231208092246-63894216648f
0.311.2-0.20260410083055-07c6232d159b
2
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/prometheus/prometheus@v0.308.0
0.311.2-0.20260410083055-07c6232d159b
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/prometheus/prometheus@v0.0.0-20241104142623-6d7569113f1c
0.311.2-0.20260410083055-07c6232d159b
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/prometheus/prometheus@v0.47.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/prometheus/prometheus@v0.46.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.