StackRadar

CVE-2026-40179

Medium

Advisory

Published 13 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
258
of 17,781 indexed, latest versions
Container images
258
deployed by those charts
Fix available
2 of 2
affected packages

Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 258 images.

Affected packageAffected versionsFixed inImages
github.com/prometheus/prometheusgolangv0.0.0-20200213233353-b90be6f32a33, v0.0.0-20200326161412-ae041f97cfc6, v0.0.0-20200609090129-a6600f564e3c, v0.0.0-20220620125440-d7e7b8e04b5e+89 more0.311.2-0.20260410083055-07c6232d159b258
prometheusbitnami2.54.1-20.305.21
OSV records
BIT-prometheus-2026-40179GHSA-vffh-x6r8-xx99
Also known as
GO-2026-5662

Charts affected

258 by stars
ChartLatestAffected imagesRadar Score
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
github.com/prometheus/prometheus@v0.0.0-20230728154742-f6edd518775c
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

22,202
kedaarieotechVerified publisher0.1.02 of 3See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,276
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

12,562
istio-allcode4devsVerified publisher1.2.02 of 6See more

istio-all code4devs 1.2.0

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
github.com/prometheus/prometheus@v0.0.0-20240827104400-e6cfa720fbe6
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,784
istio-control-planecode4devsVerified publisher1.0.01 of 3See more

istio-control-plane code4devs 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,360
cortex-tenantcortex-tenantVerified publisher0.8.11 of 1See more

cortex-tenant cortex-tenant 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/blind-oracle/cortex-tenant:v2.0.09f8896ffc15b
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

779
cryptlex-enterprisecryptlex3.21.251 of 8See more

cryptlex-enterprise cryptlex 3.21.25

1 of the 8 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-03-12T18-04-18Z46b3009bf704
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,345
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

38,346
dbrepodbrepo1.13.32 of 25See more

dbrepo dbrepo 1.13.3

2 of the 25 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
github.com/prometheus/prometheus@v0.0.0-20240827104400-e6cfa720fbe6
prometheus@2.54.1-2
0.311.2-0.20260410083055-07c6232d159b
0.305.2

Open the chart page →

52,635
elchi-stackelchi1.13.02 of 10See more

elchi-stack elchi 1.13.0

2 of the 10 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/prometheus/prometheus@v0.47.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

15,383
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

15,562
temporalglasskubeVerified publisher0.45.2-gk.14 of 14See more

temporal glasskube 0.45.2-gk.1

4 of the 14 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/prometheus/prometheus@v0.0.0-20240618130814-4c35b9250afe
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

16,346
phlaregrafana0.5.41 of 1See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/phlare:0.5.1330f990cdad9
github.com/prometheus/prometheus@v0.41.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,084
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,300
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/prometheus/prometheus@v0.51.2-0.20240405174432-b4a973753c6e
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,273
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.329 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

9 of the 17 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/prometheus/prometheus@v0.0.0-20260225185413-54e010926b0a+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

15,418
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

12,019
kubebrowsekubebrowse1.7.01 of 5See more

kubebrowse kubebrowse 1.7.0

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,141
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/prometheus/prometheus@v0.44.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,389
plane-enterprisemakeplaneOfficialVerified publisher3.7.12 of 13See more

plane-enterprise makeplane 3.7.1

2 of the 13 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,942
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,137
mimir-syncmimir-sync3.1.01 of 1See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,293
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.13.13c42b892cf72
github.com/prometheus/prometheus@v0.0.0-20260710080347-73ff57ce2b81+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

22,420
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

14,334
pyramidanalyticspyramidanalyticsVerified publisher2025.11.2261 of 9See more

pyramidanalytics pyramidanalytics 2025.11.226

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

121
velero-s3-deploymentradar-baseVerified publisher0.4.21 of 4See more

velero-s3-deployment radar-base 0.4.2

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,798
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

11,869
prometheusromanow-helm-chartsVerified publisher1.7.21 of 1See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
github.com/prometheus/prometheus@v0.0.0-20240508213442-879d80922a22
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,143
scaffoldsigstoreVerified publisher0.6.1143 of 15See more

scaffold sigstore 0.6.114

3 of the 15 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,710
smallest-self-hostsmallest-self-hostVerified publisher0.2.22 of 12See more

smallest-self-host smallest-self-host 0.2.2

2 of the 12 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,685
thanossolidchartsVerified publisher0.12.21 of 1See more

thanos solidcharts 0.12.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

196
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/prometheus/prometheus@v0.43.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,022
thanosstevehipwell-helm-charts-thanosVerified publisher1.24.11 of 1See more

thanos stevehipwell-helm-charts-thanos 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

196
stornxstornxVerified publisher1.1.14 of 9See more

stornx stornx 1.1.1

4 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
istio/pilot:1.29.1f8b0e412ac4a
github.com/prometheus/prometheus@v0.306.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.0e5aab3be6873
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/prometheus/prometheus@v0.0.0-20260225185413-54e010926b0a+dirty
0.311.2-0.20260410083055-07c6232d159b
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

11,574
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,090
yugawareyugabyteVerified publisher2026.1.11 of 3See more

yugaware yugabyte 2026.1.1

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v3.12.069f524141883
github.com/prometheus/prometheus@v0.0.0-20260528153132-9f27dffc1f93+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,610
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,323
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/prometheus@v0.0.0-20230321125236-edfc3bcd025d
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,716
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
github.com/prometheus/prometheus@v0.0.0-20230728154742-f6edd518775c
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

25,669
opentelemetry-kube-stackappscodeVerified publisher0.14.121 of 3See more

opentelemetry-kube-stack appscode 0.14.12

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,872
thanos-operatorappscodeVerified publisher2026.6.21 of 1See more

thanos-operator appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
github.com/prometheus/prometheus@v0.308.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

371
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

40,238
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

23,353
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/prometheus/prometheus@v0.0.0-20220620125440-d7e7b8e04b5e
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

8,556
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,069
smartorchestratorassist-iot-smart-orchestrator4.0.02 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

2 of the 14 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

45,363
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
github.com/prometheus/prometheus@v0.36.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,908
keptn-addonsazureorkestra0.1.01 of 4See more

keptn-addons azureorkestra 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
keptncontrib/prometheus-service:0.6.029969dd547de
github.com/prometheus/prometheus@v0.0.0-20200326161412-ae041f97cfc6
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,621
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,191
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,800

Container images carrying it

258 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:latest:v3.14.05ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b
18
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
16
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
8
minio/mc:latest:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b
6
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
4
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
4
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/grafana:11.0.00dc5a246ab16
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/grafana:11.3.0a0f881232a6f
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/loki:3.4.258a6c186ce78
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
3
prom/prometheus:v3.0.1565ee8650122
github.com/prometheus/prometheus@v0.0.0-20241128171232-1f56e8492c31
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/trillian_log_server5a878e4e4f03
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/trillian_log_signer28c5ff40963f
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/prometheus/prometheus@v0.0.0-20241022105352-91d80252c3e5
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/prometheus/prometheus@v0.0.0-20260225185413-54e010926b0a+dirty
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/prometheus@v0.0.0-20230321125236-edfc3bcd025d
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b
3
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.1.0079600c9517b
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.3.12175aaa91c96
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.1.4886b56d5534e
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.3.39e1e77ade304
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.4.0d8ea37798ccc
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/loki:3.1.0d947e68a84d9
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
2
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.52.05c435642ca4d
github.com/prometheus/prometheus@v0.0.0-20240508213442-879d80922a22
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.37.98176adea328e
github.com/prometheus/prometheus@v0.0.0-20230728154742-f6edd518775c
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/prometheus/prometheus@v0.0.0-20231208092246-63894216648f
0.311.2-0.20260410083055-07c6232d159b
2
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/prometheus/prometheus@v0.308.0
0.311.2-0.20260410083055-07c6232d159b
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/prometheus/prometheus@v0.0.0-20241104142623-6d7569113f1c
0.311.2-0.20260410083055-07c6232d159b
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/prometheus/prometheus@v0.47.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/prometheus/prometheus@v0.46.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.