StackRadar

CVE-2026-40179

Medium

Advisory

Published 13 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
258
of 17,781 indexed, latest versions
Container images
258
deployed by those charts
Fix available
2 of 2
affected packages

Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 258 images.

Affected packageAffected versionsFixed inImages
github.com/prometheus/prometheusgolangv0.0.0-20200213233353-b90be6f32a33, v0.0.0-20200326161412-ae041f97cfc6, v0.0.0-20200609090129-a6600f564e3c, v0.0.0-20220620125440-d7e7b8e04b5e+89 more0.311.2-0.20260410083055-07c6232d159b258
prometheusbitnami2.54.1-20.305.21
OSV records
BIT-prometheus-2026-40179GHSA-vffh-x6r8-xx99
Also known as
GO-2026-5662

Charts affected

258 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackbook-k8sinfra-v265.5.12 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,036
prometheusbook-k8sinfra-v226.0.13 of 6See more

prometheus book-k8sinfra-v2 26.0.1

3 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/prometheus/prometheus@v0.0.0-20241128171232-1f56e8492c31
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/pyroscope:1.10.0319bf32ae06b
github.com/prometheus/prometheus@v0.51.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,859
miniobysamioVerified publisher1.0.31 of 1See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,069
temporalcastaiVerified publisher0.54.24 of 14See more

temporal castai 0.54.2

4 of the 14 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/prometheus/prometheus@v0.0.0-20240618130814-4c35b9250afe
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.303 of 18See more

catalyst-agents catalyst-agents 0.1.30

3 of the 18 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.0.0757b5fadf816
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:3.0.028d7c00588aa
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
grafana/tempo:2.5.0f0200a9bff6d
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

15,027
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
monitoringcluster-deploy0.3.06 of 11See more

monitoring cluster-deploy 0.3.0

6 of the 11 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/prometheus/prometheus@v0.0.0-20260225185413-54e010926b0a+dirty
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
github.com/prometheus/prometheus@v0.307.3
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

8,183
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

19,338
cortex-proxycortex-proxyVerified publisher0.4.11 of 1See more

cortex-proxy cortex-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

435
csghubcsghubVerified publisher2.4.35 of 34See more

csghub csghub 2.4.3

5 of the 34 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
opencsghq/prometheus:v3.13.00aac0d04749e
github.com/prometheus/prometheus@v0.0.0-20260701104314-40af9c2cdc0e+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

58,897
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

274
dapr-agentsdapr-agents-devVerified publisher0.1.57 of 31See more

dapr-agents dapr-agents-dev 0.1.5

7 of the 31 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
grafana/loki:3.6.5847c287ada0e
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:3.6.5fbb984bab741
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/prometheus/prometheus@v0.309.2-0.20260113170727-c7bc56cf6c8f
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/prometheus/prometheus@v0.306.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.88.1d3d65efa3bee
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

22,193
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/prometheus/prometheus@v0.42.1-0.20230210113933-af1d9e01c7e4
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,926
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,176
agent-helmdatasaker0.1.85 of 6See more

agent-helm datasaker 0.1.8

5 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
datasaker/dsk-k8s-agent:latest2542ee73be51
github.com/prometheus/prometheus@v0.40.1
0.311.2-0.20260410083055-07c6232d159b
datasaker/dsk-kube-state-agent:latestd6d2eb48589d
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
datasaker/dsk-node-agent:latest1b95913b6729
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
datasaker/dsk-process-agent:latest2f38720a637d
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,571
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,509
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,470
dnation-kubernetes-monitoring-stackdnationcloud4.0.23 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

3 of the 17 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b
grafana/loki:3.2.0882e30c20683
github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:3.2.049e03f80d361
github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

21,641
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,296
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v2.51.24f6c47e39a90
github.com/prometheus/prometheus@v0.0.0-20240410100816-b4c0ab52c3e9
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,678
kube-ecp-stackemqx-operator2.5.15 of 16See more

kube-ecp-stack emqx-operator 2.5.1

5 of the 16 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
emqxecp/otelcol:2.5.04c31d9bec846
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
library/telegraf:1.27507a3eecf809
github.com/prometheus/prometheus@v0.42.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/prometheus/prometheus@v0.0.0-20241104142623-6d7569113f1c
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.1e2dc5623bcdd
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

23,685
eoapi-supporteoapiVerified publisher0.1.73 of 7See more

eoapi-support eoapi 0.1.7

3 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
github.com/prometheus/prometheus@v0.43.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/prometheus/prometheus@v0.46.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/prometheus/prometheus@v0.0.0-20230906101624-efa34a584066
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

8,648
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/prometheus/prometheus@v0.43.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,329
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.03 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/prometheus/prometheus@v0.43.1-0.20230419161410-69155c6ba1e9
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:2.9.6549a40203e97
github.com/prometheus/prometheus@v0.43.1-0.20230419161410-69155c6ba1e9
0.311.2-0.20260410083055-07c6232d159b
grafana/promtail:3.5.165bfae480b57
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,748
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.25 of 18See more

farm-observability farm-observability 0.27.2

5 of the 18 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

13,255
featureformfeatureformVerified publisher0.15.101 of 12See more

featureform featureform 0.15.10

1 of the 12 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

95
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

11,961
monitoringgaloymoney0.12.213 of 6See more

monitoring galoymoney 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/prometheus/prometheus@v0.0.0-20241022105352-91d80252c3e5
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,295
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

11,961
monitoringgaloymoney20.12.213 of 6See more

monitoring galoymoney2 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/prometheus/prometheus@v0.0.0-20241022105352-91d80252c3e5
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,295
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

12,056
gnp-stackgnp-stack0.0.53 of 14See more

gnp-stack gnp-stack 0.0.5

3 of the 14 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/prometheus/prometheus@v0.306.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.85.0890b3bb05cf4
github.com/prometheus/prometheus@v0.305.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,659
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

24,319
kube-prometheus-stackgpg-dev84.0.02 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,288
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,071
opentelemetry-demogpg-dev0.33.83 of 27See more

opentelemetry-demo gpg-dev 0.33.8

3 of the 27 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/prometheus/prometheus@v0.0.0-20241114161949-c5d009d57fcc
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

49,025
prometheusgpg-dev29.2.13 of 6See more

prometheus gpg-dev 29.2.1

3 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.1693faa0b8724
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/prometheus/prometheus@v0.0.0-20260413113908-f0f0fdd679dc+dirty
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
github.com/prometheus/prometheus@v0.307.3
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,261
prometheus-operator-admission-webhookgpg-dev0.18.11 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,685
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/prometheus/prometheus@v0.308.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

592
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/prometheus/prometheus@v0.304.3-0.20250703114031-419d436a447a
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

8,188
prometheusgrafana-uxadax26.0.13 of 6See more

prometheus grafana-uxadax 26.0.1

3 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/prometheus/prometheus@v0.0.0-20241128171232-1f56e8492c31
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,304
routergroundcover1.12.3571 of 7See more

router groundcover 1.12.357

1 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,009
logging-stackhelm-charts-alexis-carbillet0.1.02 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
grafana/loki:2.8.2b1da1d23037e
github.com/prometheus/prometheus@v0.42.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.03 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

3 of the 11 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
prom/prometheus:v2.48.1a67e5e402ff5
github.com/prometheus/prometheus@v0.0.0-20231208092246-63894216648f
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

9,460
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
github.com/prometheus/prometheus@v0.35.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,434
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

25,017
jaegerhuseyinbabalVerified publisher0.1.01 of 3See more

jaeger huseyinbabal 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,477

Container images carrying it

258 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
1
opencsghq/prometheus:v3.13.00aac0d04749e
github.com/prometheus/prometheus@v0.0.0-20260701104314-40af9c2cdc0e+dirty
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/prometheus/prometheus@v0.51.2-0.20240405174432-b4a973753c6e
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/prometheus/prometheus@v0.37.0
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/prometheus/prometheus@v0.308.1
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/prometheus/prometheus@v0.44.0
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/prometheus/prometheus@v0.47.2
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/prometheus/prometheus@v0.309.2-0.20260113170727-c7bc56cf6c8f
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/prometheus/prometheus@v0.43.1
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/prometheus/prometheus@v0.38.0
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
github.com/prometheus/prometheus@v0.307.1
0.311.2-0.20260410083055-07c6232d159b
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
1
percona/pmm-server:3.9.1003f9c25f842
github.com/prometheus/prometheus@v0.305.3
0.311.2-0.20260410083055-07c6232d159b
1
prom/prometheus:v2.51.24f6c47e39a90
github.com/prometheus/prometheus@v0.0.0-20240410100816-b4c0ab52c3e9
0.311.2-0.20260410083055-07c6232d159b
1
prom/prometheus:v3.12.069f524141883
github.com/prometheus/prometheus@v0.0.0-20260528153132-9f27dffc1f93+dirty
0.311.2-0.20260410083055-07c6232d159b
1
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/prometheus/prometheus@v0.0.0-20231115233233-6d80b30990bc
0.311.2-0.20260410083055-07c6232d159b
1
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
github.com/prometheus/prometheus@v0.309.2-0.20260113170727-c7bc56cf6c8f
0.311.2-0.20260410083055-07c6232d159b
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
1
uptrace/uptrace:2.0.234a02c3b2d12
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b
1
wavefronthq/prometheus-storage-adapter:latestded77b38c7c6
github.com/prometheus/prometheus@v0.0.0-20200213233353-b90be6f32a33
0.311.2-0.20260410083055-07c6232d159b
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/prometheus/prometheus@v0.52.1
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/prometheus/prometheus@v0.51.2-0.20240405174432-b4a973753c6e
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/blind-oracle/cortex-tenant:v2.0.09f8896ffc15b
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
github.com/prometheus/prometheus@v0.0.0-20250502145825-3dcecabff6f5+dirty
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/georgmangold/console:v1.8.158f4f180aa6e
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
github.com/prometheus/prometheus@v0.306.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/prometheus/prometheus@v0.306.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kuoss/lethe:v0.3.1c59f082ba8b2
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
github.com/prometheus/prometheus@v0.305.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/prometheus/prometheus@v0.40.7
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/prometheus/prometheus@v0.44.0
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/prometheus/prometheus@v0.306.0
0.311.2-0.20260410083055-07c6232d159b
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.