CVE-2026-40179

Medium

Advisory

Published 13 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.003; 18th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 258; of 17,781 indexed, latest versions
Container images: 258; deployed by those charts
Fix available: 2 of 2; affected packages

Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 258 images.

Affected package	Affected versions	Fixed in	Images
github.com/prometheus/prometheusgolang	v0.0.0-20200213233353-b90be6f32a33, v0.0.0-20200326161412-ae041f97cfc6, v0.0.0-20200609090129-a6600f564e3c, v0.0.0-20220620125440-d7e7b8e04b5e+89 more	0.311.2-0.20260410083055-07c6232d159b	258
prometheusbitnami	2.54.1-2	0.305.2	1

OSV records: BIT-prometheus-2026-40179 GHSA-vffh-x6r8-xx99
Also known as: GO-2026-5662

Charts affected

258 by stars

Chart

Latest

Affected images

Radar Score

prometheusprometheus-community

29.29.0

1 of 6 See more

prometheus prometheus-community 29.29.0

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

458

kedakedacore

2.20.2

2 of 3 See more

keda kedacore 2.20.2

2 of the 3 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	github.com/prometheus/prometheus@v0.304.2	0.311.2-0.20260410083055-07c6232d159b
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	github.com/prometheus/prometheus@v0.304.2	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

873

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	github.com/prometheus/prometheus@v0.300.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,517

openebsopenebs

4.6.1

4 of 35 See more

openebs openebs 4.6.1

4 of the 35 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
grafana/loki :3.4.2	58a6c186ce78	github.com/prometheus/prometheus@v0.55.0	0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	github.com/prometheus/prometheus@v0.300.1	0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	github.com/prometheus/prometheus@v0.301.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

23,894

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	github.com/prometheus/prometheus@v0.302.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,092

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	github.com/prometheus/prometheus@v0.35.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,955

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	github.com/prometheus/prometheus@v0.300.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,483

openfaasopenfaas

15.0.13

1 of 6 See more

openfaas openfaas 15.0.13

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,543

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	github.com/prometheus/prometheus@v0.0.0-20231115233233-6d80b30990bc	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,367

signozsignoz

0.141.1

1 of 5 See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
signoz/signoz-otel-collector :v0.144.9	72aa1e4c1ec5	github.com/prometheus/prometheus@v0.309.2-0.20260113170727-c7bc56cf6c8f	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,568

pulsarapache

4.7.0

1 of 10 See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	github.com/prometheus/prometheus@v0.303.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

9,864

miniocloudpirates-minio

0.13.4

1 of 1 See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961

pyroscopegrafana

2.3.1

1 of 3 See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	github.com/prometheus/prometheus@v0.301.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,157

operatorminio-operator

7.1.1

1 of 1 See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/minio/operator :v7.1.1	cd587f60c43d	github.com/prometheus/prometheus@v0.302.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

874

thanosthanos-community

0.43.0

1 of 1 See more

thanos thanos-community 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.42.4	b567818fe608	github.com/prometheus/prometheus@v0.309.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

196

oncallgrafana

1.16.5

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	github.com/prometheus/prometheus@v0.52.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

16,251

aws-cloudwatch-metricsaws

0.0.11

1 of 1 See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	github.com/prometheus/prometheus@v0.42.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,556

linkerd-jaegerlinkerd2

30.12.11

1 of 4 See more

linkerd-jaeger linkerd2 30.12.11

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	github.com/prometheus/prometheus@v0.37.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,405

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	github.com/prometheus/prometheus@v0.0.0-20231208092246-63894216648f	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,346

plane-cemakeplane

1.8.1

2 of 11 See more

plane-ce makeplane 1.8.1

2 of the 11 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,854

milvusmilvus-helm

5.0.27

1 of 4 See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	github.com/prometheus/prometheus@v0.300.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,670

prometheus-operatorarldka

13.0.1

1 of 2 See more

prometheus-operator arldka 13.0.1

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	github.com/prometheus/prometheus@v0.51.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,107

budibasebudibase

0.0.0-master

1 of 7 See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,775

thanosstevehipwell

1.24.1

1 of 1 See more

thanos stevehipwell 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.42.4	b567818fe608	github.com/prometheus/prometheus@v0.309.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

196

ilumilum

6.7.3

2 of 19 See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.3.12-debian-12-r0	ba9f3b4b0b00	github.com/prometheus/prometheus@v0.301.0	0.311.2-0.20260410083055-07c6232d159b
minio/mc :RELEASE.2025-04-16T18-13-26Z	aead63c77f9d	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

23,228

pyrrarlex

0.14.3

1 of 1 See more

pyrra rlex 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	github.com/prometheus/prometheus@v0.300.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

953

k8s-infrasignoz

0.17.1

1 of 1 See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.139.0	faf125d656fa	github.com/prometheus/prometheus@v0.307.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,039

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	github.com/prometheus/prometheus@v0.43.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,630

cortexcortex

3.3.8

1 of 4 See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.21.1	8577eb292a01	github.com/prometheus/prometheus@v0.308.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,897

pmmpercona

1.9.1

1 of 1 See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
percona/pmm-server :3.9.1	003f9c25f842	github.com/prometheus/prometheus@v0.305.3	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

790

rekorsigstore

1.8.5

2 of 9 See more

rekor sigstore 1.8.5

2 of the 9 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	5a878e4e4f03	github.com/prometheus/prometheus@v0.51.0	0.311.2-0.20260410083055-07c6232d159b
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	28c5ff40963f	github.com/prometheus/prometheus@v0.51.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,415

thehivestrangebee-helm

1.0.6

2 of 7 See more

thehive strangebee-helm 1.0.6

2 of the 7 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

16,210

klusterviewklusterview

0.1.0

1 of 4 See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :latest	5ce7540c3c00	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,795

venti-stackkuoss

0.5.0

3 of 9 See more

venti-stack kuoss 0.5.0

3 of the 9 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/lethe :v0.3.3	ebdf55fd5705	github.com/prometheus/prometheus@v0.304.2	0.311.2-0.20260410083055-07c6232d159b
ghcr.io/kuoss/venti :v0.3.3	8ee3e70d77f1	github.com/prometheus/prometheus@v0.305.0	0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus :v3.13.2	508729e0e2d1	github.com/prometheus/prometheus@v0.0.0-20260730110445-bb5dff00cf8f+dirty	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,808

fulciosigstore

2.11.1

1 of 6 See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	github.com/prometheus/prometheus@v0.51.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,490

aperture-controlleraperture

2.34.0

1 of 5 See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
fluxninja/aperture-operator :2.34.0	356d7aa86632	github.com/prometheus/prometheus@v0.48.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,663

prometheusavesha

19.3.0

1 of 4 See more

prometheus avesha 19.3.0

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,484

coder-observabilitycoder-observability

0.7.3

5 of 21 See more

coder-observability coder-observability 0.7.3

5 of the 21 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
grafana/grafana :10.4.19	a9043254ba16	github.com/prometheus/prometheus@v0.49.0	0.311.2-0.20260410083055-07c6232d159b
grafana/loki :3.1.0	d947e68a84d9	github.com/prometheus/prometheus@v0.51.0	0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary :3.1.0	39baf6d67f85	github.com/prometheus/prometheus@v0.51.0	0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	github.com/prometheus/prometheus@v0.52.0	0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	github.com/prometheus/prometheus@v0.0.0-20240710101407-14cfec3f6048	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

24,700

cosmocosmo-platform

0.20.0

2 of 10 See more

cosmo cosmo-platform 0.20.0

2 of the 10 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	github.com/prometheus/prometheus@v0.51.2-0.20240405174432-b4a973753c6e	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

28,839

monitoring-stackhaukitech

0.1.11

1 of 3 See more

monitoring-stack haukitech 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,164

prometheus-operatorhaukitech

0.1.4

1 of 1 See more

prometheus-operator haukitech 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

561

coreinstill-ai

0.1.75

1 of 15 See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
instill/api-gateway :9bfdc88	b53eaa51c523	github.com/prometheus/prometheus@v0.54.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

30,816

vcluster-platformloft

4.12.0

1 of 1 See more

vcluster-platform loft 4.12.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-platform :4.12.0	ef92da4621e6	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

744

kubecostmesosphere-stable

0.37.5

3 of 9 See more

kubecost mesosphere-stable 0.37.5

3 of the 9 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	github.com/prometheus/prometheus@v0.47.2	0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	github.com/prometheus/prometheus@v0.0.0-20241022105352-91d80252c3e5	0.311.2-0.20260410083055-07c6232d159b
quay.io/thanos/thanos :v0.36.1	e542959e1b36	github.com/prometheus/prometheus@v0.52.2-0.20240614130246-4c1e71fa0b3d	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

17,693

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-07-23T15-54-02Z	d249d1fb6966	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

13,521

miniosolidcharts

0.5.0

1 of 1 See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
ghcr.io/coollabsio/minio :RELEASE.2025-10-15T17-29-55Z	69b55a1c1c5d	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,055

sn-platformstreamnative

1.11.44

1 of 9 See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	github.com/prometheus/prometheus@v0.0.0-20230321125236-edfc3bcd025d	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

15,477

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	github.com/prometheus/prometheus@v0.302.1	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,619

kubernetes-etcd-backupadfinis

1.6.2

1 of 1 See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,819

clearml-servingallegroai

1.6.2

1 of 9 See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901	0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

17,877

Container images carrying it

258 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	github.com/prometheus/prometheus@v0.54.0	0.311.2-0.20260410083055-07c6232d159b	1
opencsghq/prometheus :v3.13.0	0aac0d04749e	github.com/prometheus/prometheus@v0.0.0-20260701104314-40af9c2cdc0e+dirty	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector :0.100.0	9e36620d6c2c	github.com/prometheus/prometheus@v0.51.2-0.20240405174432-b4a973753c6e	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	github.com/prometheus/prometheus@v0.37.0	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.143.0	3bc07732530c	github.com/prometheus/prometheus@v0.308.1	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.113.0	5ac3e0ba2b0b	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	github.com/prometheus/prometheus@v0.44.0	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	github.com/prometheus/prometheus@v0.47.2	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.145.0	a7343f018690	github.com/prometheus/prometheus@v0.309.2-0.20260113170727-c7bc56cf6c8f	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.81.0	c6671841470b	github.com/prometheus/prometheus@v0.43.1	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.63.1	dfb3a55ea8c9	github.com/prometheus/prometheus@v0.38.0	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-contrib :0.139.0	faf125d656fa	github.com/prometheus/prometheus@v0.307.1	0.311.2-0.20260410083055-07c6232d159b	1
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	github.com/prometheus/prometheus@v0.300.1	0.311.2-0.20260410083055-07c6232d159b	1
percona/pmm-server :3.9.1	003f9c25f842	github.com/prometheus/prometheus@v0.305.3	0.311.2-0.20260410083055-07c6232d159b	1
prom/prometheus :v2.51.2	4f6c47e39a90	github.com/prometheus/prometheus@v0.0.0-20240410100816-b4c0ab52c3e9	0.311.2-0.20260410083055-07c6232d159b	1
prom/prometheus :v3.12.0	69f524141883	github.com/prometheus/prometheus@v0.0.0-20260528153132-9f27dffc1f93+dirty	0.311.2-0.20260410083055-07c6232d159b	1
prom/prometheus :v2.48.0	b440bc0e8aa5	github.com/prometheus/prometheus@v0.0.0-20231115233233-6d80b30990bc	0.311.2-0.20260410083055-07c6232d159b	1
signoz/signoz-otel-collector :v0.144.9	72aa1e4c1ec5	github.com/prometheus/prometheus@v0.309.2-0.20260113170727-c7bc56cf6c8f	0.311.2-0.20260410083055-07c6232d159b	1
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	github.com/prometheus/prometheus@v0.49.0	0.311.2-0.20260410083055-07c6232d159b	1
uptrace/uptrace :2.0.2	34a02c3b2d12	github.com/prometheus/prometheus@v0.302.1	0.311.2-0.20260410083055-07c6232d159b	1
wavefronthq/prometheus-storage-adapter :latest	ded77b38c7c6	github.com/prometheus/prometheus@v0.0.0-20200213233353-b90be6f32a33	0.311.2-0.20260410083055-07c6232d159b	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	github.com/prometheus/prometheus@v0.52.1	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/antnsn/mal-sync :v1.0.5	2f06e72cef36	github.com/prometheus/prometheus@v0.302.1	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	github.com/prometheus/prometheus@v0.51.2-0.20240405174432-b4a973753c6e	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/blind-oracle/cortex-tenant :v2.0.0	9f8896ffc15b	github.com/prometheus/prometheus@v0.302.1	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	github.com/prometheus/prometheus@v0.0.0-20250502145825-3dcecabff6f5+dirty	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/coollabsio/minio :RELEASE.2025-10-15T17-29-55Z	69b55a1c1c5d	github.com/prometheus/prometheus@v0.303.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/georgmangold/console :v1.8.1	58f4f180aa6e	github.com/prometheus/prometheus@v0.301.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kagent-dev/kagent/tools :0.2.1	50b431281d3e	github.com/prometheus/prometheus@v0.306.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kagent-dev/kagent/tools :0.0.13	c8882543f693	github.com/prometheus/prometheus@v0.306.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kedacore/keda :2.16.0	02348a19aeae	github.com/prometheus/prometheus@v0.49.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kedacore/keda :2.17.0	112fc427d933	github.com/prometheus/prometheus@v0.54.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kedacore/keda :2.17.2	72dc058e478d	github.com/prometheus/prometheus@v0.54.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	github.com/prometheus/prometheus@v0.304.2	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kedacore/keda-metrics-apiserver :2.17.0	167fd532bd43	github.com/prometheus/prometheus@v0.54.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	github.com/prometheus/prometheus@v0.304.2	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kedacore/keda-metrics-apiserver :2.16.0	73a2ebae4413	github.com/prometheus/prometheus@v0.49.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kedacore/keda-metrics-apiserver :2.17.2	f312f50ddc57	github.com/prometheus/prometheus@v0.54.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	github.com/prometheus/prometheus@v0.304.2	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kuoss/lethe :v0.3.3	ebdf55fd5705	github.com/prometheus/prometheus@v0.304.2	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/kuoss/venti :v0.3.3	8ee3e70d77f1	github.com/prometheus/prometheus@v0.305.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/loft-sh/vcluster-platform :4.12.0	ef92da4621e6	github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	github.com/prometheus/prometheus@v0.40.7	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	github.com/prometheus/prometheus@v0.44.0	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	github.com/prometheus/prometheus@v0.54.1	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	github.com/prometheus/prometheus@v0.48.1	0.311.2-0.20260410083055-07c6232d159b	1
ghcr.io/openconfig/gnmic :0.45.0	d422a9ebd4a2	github.com/prometheus/prometheus@v0.306.0	0.311.2-0.20260410083055-07c6232d159b	1