StackRadar

CVE-2026-40179

Medium

Advisory

Published 13 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
258
of 17,781 indexed, latest versions
Container images
258
deployed by those charts
Fix available
2 of 2
affected packages

Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer

Carried by container images the latest versions of 258 of 17,781 indexed charts deploy, on 258 images.

Affected packageAffected versionsFixed inImages
github.com/prometheus/prometheusgolangv0.0.0-20200213233353-b90be6f32a33, v0.0.0-20200326161412-ae041f97cfc6, v0.0.0-20200609090129-a6600f564e3c, v0.0.0-20220620125440-d7e7b8e04b5e+89 more0.311.2-0.20260410083055-07c6232d159b258
prometheusbitnami2.54.1-20.305.21
OSV records
BIT-prometheus-2026-40179GHSA-vffh-x6r8-xx99
Also known as
GO-2026-5662

Charts affected

258 by stars
ChartLatestAffected imagesRadar Score
monitoring-stackict-platformVerified publisher0.4.02 of 13See more

monitoring-stack ict-platform 0.4.0

2 of the 13 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

9,573
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,384
influxdb-enterpriseinfluxdata0.2.11 of 2See more

influxdb-enterprise influxdata 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
library/influxdb:1.12.3-datab0f9fc41ed79
github.com/prometheus/prometheus@v0.0.0-20200609090129-a6600f564e3c
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,939
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,122
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

45,239
thanosk8sonlabVerified publisher1.1.71 of 1See more

thanos k8sonlab 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/prometheus/prometheus@v0.308.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

592
kagentkagent0.10.11 of 6See more

kagent kagent 0.10.1

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
github.com/prometheus/prometheus@v0.306.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,900
kiaekiae0.1.62 of 9See more

kiae kiae 0.1.6

2 of the 9 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
github.com/prometheus/prometheus@v0.36.2
0.311.2-0.20260410083055-07c6232d159b
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/prometheus/prometheus@v0.38.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

19,168
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

12,062
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/prometheus/prometheus@v0.43.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,561
lokikubeblocksVerified publisher5.39.02 of 5See more

loki kubeblocks 5.39.0

2 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:2.9.26074e01dbe03
github.com/prometheus/prometheus@v0.43.1-0.20230419161410-69155c6ba1e9
0.311.2-0.20260410083055-07c6232d159b
grafana/loki-canary:2.9.24249db29b992
github.com/prometheus/prometheus@v0.43.1-0.20230419161410-69155c6ba1e9
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,841
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,131
prometheuskubeblocksVerified publisher15.16.11 of 6See more

prometheus kubeblocks 15.16.1

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/prometheus/prometheus@v0.0.0-20221007154346-dcd6af9e0d56
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,302
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,417
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
github.com/prometheus/prometheus@v0.36.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

18,316
minio-gatewaykubesphere-testVerified publisher0.1.01 of 1See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,069
lethe-stackkuossOfficialVerified publisher0.2.31 of 3See more

lethe-stack kuoss 0.2.3

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/kuoss/lethe:v0.3.1c59f082ba8b2
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,762
krakendkvalitetsitVerified publisher0.0.31 of 1See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,242
prometheuslectures-k8sinfra15.8.51 of 6See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/prometheus/prometheus@v0.0.0-20220714142409-b41e0750abf5
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

9,092
minioleprechaun-charts0.1.61 of 1See more

minio leprechaun-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-01-20T14-49-07Z-cpuv114b7076ca85a
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,312
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.31 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/prometheus/prometheus@v0.0.0-20241104142623-6d7569113f1c
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,420
linkerd-dashboardlinkerd-dashboardOfficial0.11.11 of 2See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
github.com/prometheus/prometheus@v0.0.0-20250502145825-3dcecabff6f5+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,037
tempo-distributedloafoe1.20.11 of 2See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/tempo:2.6.0f55a8a1937ff
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,020
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,510
nightingalelogic3579Verified publisher0.3.12 of 6See more

nightingale logic3579 0.3.1

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
flashcatcloud/nightingale:8.5.1421acb36181b
github.com/prometheus/prometheus@v0.47.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
github.com/prometheus/prometheus@v0.0.0-20240827104400-e6cfa720fbe6
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

8,938
loki-proxyloki-proxyVerified publisher0.4.11 of 1See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

782
magistralamagistrala-devopsVerified publisher0.16.23 of 42See more

magistrala magistrala-devops 0.16.2

3 of the 42 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/prometheus/prometheus@v0.0.0-20250102134959-7086161a93b2
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.11.099392035ae99
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

24,400
mayastormayastorVerified publisher2.12.14 of 31See more

mayastor mayastor 2.12.1

4 of the 31 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

21,064
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,742
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
github.com/prometheus/prometheus@v0.306.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,777
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

11,689
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
github.com/prometheus/prometheus@v0.52.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,603
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
github.com/prometheus/prometheus@v0.304.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

10,180
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/prometheus/prometheus@v0.40.7
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,799
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.61 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

1 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,713
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/prometheus/prometheus@v0.44.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

1,594
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:latest5ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

8,928
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,309
metrics-servernicklasfrahm-metrics-serverVerified publisher0.1.11 of 1See more

metrics-server nicklasfrahm-metrics-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

785
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
github.com/prometheus/prometheus@v0.43.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

2,966
prometheusnodepulse25.0.02 of 6See more

prometheus nodepulse 25.0.0

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/prometheus/prometheus@v0.46.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/prometheus/prometheus@v0.0.0-20230906101624-efa34a584066
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

7,740
lensoci-ai-incubations0.1.144 of 16See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:12.1.1a1701c218024
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-config-reloader:v0.85.0ebb560bcb6bd
github.com/prometheus/prometheus@v0.305.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
github.com/prometheus/prometheus@v0.0.0-20250714113842-8be3a9560fbd+dirty
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus/pushgateway:v1.11.103738d278e08
github.com/prometheus/prometheus@v0.302.1
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

17,070
onyx-stackonyx0.3.12 of 12See more

onyx-stack onyx 0.3.1

2 of the 12 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

6,338
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/prometheus/prometheus@v0.308.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,017
opscruiseopenshift0.35.1001 of 11See more

opscruise openshift 0.35.100

1 of the 11 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/prometheus/prometheus@v0.0.0-20220620125440-d7e7b8e04b5e
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

8,201
prometheusosc0.26.22 of 12See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.90.1ffe7c4ca80cb
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,374
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/prometheus/prometheus@v0.0.0-20241128171232-1f56e8492c31
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

71,208
lokiot-container-kit1.0.12 of 5See more

loki ot-container-kit 1.0.1

2 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/loki:3.1.0d947e68a84d9
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
grafana/promtail:3.0.0d3de3da9431c
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

4,831
loki-standaloneot-container-kit1.0.21 of 5See more

loki-standalone ot-container-kit 1.0.2

1 of the 5 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
quay.io/opstree/loki:3.6-debian13bdfee214c7ea
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

3,580
pgaot-container-kit1.0.32 of 6See more

pga ot-container-kit 1.0.3

2 of the 6 container images this version deploys carry CVE-2026-40179.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
quay.io/prometheus-operator/prometheus-operator:v0.75.1a7cc63108511
github.com/prometheus/prometheus@v0.53.0
0.311.2-0.20260410083055-07c6232d159b

Open the chart page →

5,137

Container images carrying it

258 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/prometheus:latest:v3.14.05ce7540c3c00
github.com/prometheus/prometheus@v0.0.0-20260817133844-d7598b714141+dirty
0.311.2-0.20260410083055-07c6232d159b
18
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
16
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
8
minio/mc:latest:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.2-0.20260410083055-07c6232d159b
7
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.2-0.20260410083055-07c6232d159b
6
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
4
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.2-0.20260410083055-07c6232d159b
4
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/prometheus/prometheus@v0.303.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/grafana:11.0.00dc5a246ab16
github.com/prometheus/prometheus@v0.49.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/grafana:11.3.0a0f881232a6f
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/loki:3.4.258a6c186ce78
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
3
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.2-0.20260410083055-07c6232d159b
3
prom/prometheus:v3.0.1565ee8650122
github.com/prometheus/prometheus@v0.0.0-20241128171232-1f56e8492c31
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/trillian_log_server5a878e4e4f03
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
ghcr.io/sigstore/scaffolding/trillian_log_signer28c5ff40963f
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
github.com/prometheus/prometheus@v0.310.0
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/prometheus/prometheus@v0.0.0-20221220103620-c0d8a56c6901
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/prometheus/prometheus@v0.0.0-20241022105352-91d80252c3e5
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/prometheus/prometheus@v0.0.0-20260225185413-54e010926b0a+dirty
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/prometheus/prometheus@v0.0.0-20230321125236-edfc3bcd025d
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
3
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
github.com/prometheus/prometheus@v0.51.1
0.311.2-0.20260410083055-07c6232d159b
3
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/prometheus/prometheus@v0.54.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.1.0079600c9517b
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.3.12175aaa91c96
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.1.4886b56d5534e
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.3.39e1e77ade304
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:11.4.0d8ea37798ccc
github.com/prometheus/prometheus@v0.52.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/prometheus/prometheus@v0.303.1
0.311.2-0.20260410083055-07c6232d159b
2
grafana/loki:3.1.0d947e68a84d9
github.com/prometheus/prometheus@v0.51.0
0.311.2-0.20260410083055-07c6232d159b
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
2
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/prometheus/prometheus@v0.48.1
0.311.2-0.20260410083055-07c6232d159b
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.52.05c435642ca4d
github.com/prometheus/prometheus@v0.0.0-20240508213442-879d80922a22
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.37.98176adea328e
github.com/prometheus/prometheus@v0.0.0-20230728154742-f6edd518775c
0.311.2-0.20260410083055-07c6232d159b
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/prometheus/prometheus@v0.0.0-20231208092246-63894216648f
0.311.2-0.20260410083055-07c6232d159b
2
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/prometheus/prometheus@v0.308.0
0.311.2-0.20260410083055-07c6232d159b
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/prometheus/prometheus@v0.0.0-20241104142623-6d7569113f1c
0.311.2-0.20260410083055-07c6232d159b
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/prometheus/prometheus@v0.47.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/prometheus/prometheus@v0.46.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/prometheus/prometheus@v0.300.1
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/prometheus/prometheus@v0.55.0
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/prometheus/prometheus@v0.54.1
0.311.2-0.20260410083055-07c6232d159b
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
github.com/prometheus/prometheus@v0.309.1
0.311.2-0.20260410083055-07c6232d159b
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.