StackRadar

CVE-2026-40179

Medium

Advisory

Published 13 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
258
of 17,781 indexed, latest versions
Container images
258
deployed by those charts
Fix available
2 of 2
affected packages

Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 258 images.

Affected packageAffected versionsFixed inImages
github.com/prometheus/prometheusgolangv0.0.0-20200213233353-b90be6f32a33, v0.0.0-20200326161412-ae041f97cfc6, v0.0.0-20200609090129-a6600f564e3c, v0.0.0-20220620125440-d7e7b8e04b5e+89 more0.311.2-0.20260410083055-07c6232d159b258
prometheusbitnami2.54.1-20.305.21
OSV records
BIT-prometheus-2026-40179GHSA-vffh-x6r8-xx99
Also known as
GO-2026-5662

Charts affected

258 by stars
ChartLatestAffected imagesRadar Score
tempo-standaloneot-container-kit1.0.11 of 1See more

tempo-standalone ot-container-kit 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/opstree/tempo:2.10.4-debian13cb734024b3fd
github.com/prometheus/prometheus@v0.307.3
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

588
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,411
vm-standaloneot-container-kit0.0.41 of 6See more

vm-standalone ot-container-kit 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/opstree/grafana:12.4.3b61c1ed2f015
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,378
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,016
minioowan-charts0.1.21 of 2See more

minio owan-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/georgmangold/console:v1.8.158f4f180aa6e
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

953
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/prometheus/prometheus@v0.51.2-0.20240405174432-b4a973753c6e
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,980
parcaparca4.19.02 of 2See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/prometheus/prometheus@v0.47.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/prometheus/prometheus@v0.48.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/prometheus/prometheus@v0.47.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,978
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/prometheus/prometheus@v0.305.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,366
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/prometheus/prometheus@v0.52.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,120
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/prometheus/prometheus@v0.43.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,326
pet-battle-nsffpetbattle0.0.22 of 4See more

pet-battle-nsff petbattle 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,678
npre-essentialsphntom0.1.602 of 22See more

npre-essentials phntom 0.1.60

2 of the 22 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/promtail:2.7.0c16c710f7333
github.com/prometheus/prometheus@v0.39.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
github.com/prometheus/prometheus@v0.40.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

26,840
prom-label-proxyprometheus-communityOfficialVerified publisher0.22.01 of 1See more

prom-label-proxy prometheus-community 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/prom-label-proxy:v0.13.011ccecc8f08d
github.com/prometheus/prometheus@v0.311.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

252
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,525
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.3.28af2de1abbdd
github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,272
kubecostradar-baseVerified publisher1.0.02 of 7See more

kubecost radar-base 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.2.05888c188cf09
github.com/prometheus/prometheus@v0.0.0-20250217163908-bf7ec404b2a4
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

9,355
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,667
thanosrayselfs-chartsVerified publisher0.1.51 of 1See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
github.com/prometheus/prometheus@v0.305.1-0.20250721065454-b09cf6be8d56
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

750
monitoringrocketchat-server0.0.173 of 9See more

monitoring rocketchat-server 0.0.17

3 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.6.3cd6e176883a9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/prometheus/prometheus@v0.308.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
github.com/prometheus/prometheus@v0.304.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,859
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
github.com/prometheus/prometheus@v0.304.3-0.20250703114031-419d436a447a
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,597
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,795
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

803
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,721
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,202
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

923
thanos-compactorsb-helm-charts0.3.01 of 1See more

thanos-compactor sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
thanos-querysb-helm-charts0.3.01 of 1See more

thanos-query sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
thanos-query-frontendsb-helm-charts0.3.01 of 1See more

thanos-query-frontend sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
thanos-receivesb-helm-charts0.3.01 of 1See more

thanos-receive sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
thanos-rulersb-helm-charts0.3.01 of 1See more

thanos-ruler sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
thanos-sidecarsb-helm-charts0.3.01 of 1See more

thanos-sidecar sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
thanos-storesb-helm-charts0.3.01 of 1See more

thanos-store sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

961
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,708
shopwareshopware-storeVerified publisher2.1.11 of 5See more

shopware shopware-store 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,876
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,728
trilliansigstoreVerified publisher0.3.172 of 5See more

trillian sigstore 0.3.17

2 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,808
network-observerskupper-network-observerVerified publisher2.2.21 of 3See more

network-observer skupper-network-observer 2.2.2

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
github.com/prometheus/prometheus@v0.0.0-20260427144041-eb173f5256d4+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

601
skypilot-prometheus-serverskypilotVerified publisher0.11.12 of 3See more

skypilot-prometheus-server skypilot 0.11.1

2 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.83.078aec597d87a
github.com/prometheus/prometheus@v0.304.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
github.com/prometheus/prometheus@v0.0.0-20250531064119-aea6503d9bba+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,344
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/slok/sloth:v0.16.0f0f0075b0d45
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,962
cost-analyzersoftonic2.5.52 of 6See more

cost-analyzer softonic 2.5.5

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.2.16927e0919a14
github.com/prometheus/prometheus@v0.0.0-20250225191152-804c49d58f3f
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,901
kedasoftonic2.17.02 of 3See more

keda softonic 2.17.0

2 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.0112fc427d933
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,583
kube-prometheus-stacksoftonic81.5.12 of 6See more

kube-prometheus-stack softonic 81.5.1

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.88.1d3d65efa3bee
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,974
my-appstakefish0.1.01 of 3See more

my-app stakefish 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

262
stakefishstakefish0.1.03 of 8See more

stakefish stakefish 0.1.0

3 of the 8 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
github.com/prometheus/prometheus@v0.0.0-20240508213442-879d80922a22
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.73.2706cde441321
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

20,223
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/prometheus@v0.0.0-20230321125236-edfc3bcd025d
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,134
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,025
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,248
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,973
tfy-lokitruefoundryVerified publisher0.1.62 of 2See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
github.com/prometheus/prometheus@v0.43.1-0.20230419161410-69155c6ba1e9
0.311.2-0.20260410083055-07c6232d159b
grafana/promtail:2.9.1063a2e57a5b14
github.com/prometheus/prometheus@v0.43.1-0.20230419161410-69155c6ba1e9
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,813

Container images carrying it

258 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
github.com/prometheus/prometheus@v0.0.0-20240710101407-14cfec3f6048
0.311.2-0.20260410083055-07c6232d159b
1
quay.io/prometheus/pushgateway:v1.11.103738d278e08
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b
1
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
github.com/prometheus/prometheus@v0.305.1-0.20250721065454-b09cf6be8d56
0.311.2-0.20260410083055-07c6232d159b
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
github.com/prometheus/prometheus@v0.52.2-0.20240614130246-4c1e71fa0b3d
0.311.2-0.20260410083055-07c6232d159b
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
github.com/prometheus/prometheus@v0.35.0
0.311.2-0.20260410083055-07c6232d159b
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
github.com/prometheus/prometheus@v0.35.0
0.311.2-0.20260410083055-07c6232d159b
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.