StackRadar

CVE-2026-42151

High

Advisory

Published 5 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
197
of 17,781 indexed, latest versions
Container images
192
deployed by those charts
Fix available
2 of 2
affected packages

Prometheus Azure AD remote write OAuth client secret exposed via config API

Carried by container images the latest versions of 197 of 17,781 indexed charts deploy, on 192 images.

Affected packageAffected versionsFixed inImages
github.com/prometheus/prometheusgolangv0.46.0, v0.47.0, v0.47.1, v0.47.2+41 more0.311.3191
prometheusbitnami2.54.1-20.305.31
OSV records
BIT-prometheus-2026-42151GHSA-wg65-39gg-5wfj
Also known as
GO-2026-5710

Charts affected

197 by stars
ChartLatestAffected imagesRadar Score
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.328 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

8 of the 17 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
github.com/prometheus/prometheus@v0.303.1
0.311.3
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.3
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.3
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.3
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.3
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
github.com/prometheus/prometheus@v0.309.1
0.311.3

Open the chart page →

15,418
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.3
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
github.com/prometheus/prometheus@v0.301.0
0.311.3

Open the chart page →

12,019
kubebrowsekubebrowse1.7.01 of 5See more

kubebrowse kubebrowse 1.7.0

1 of the 5 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

4,141
plane-enterprisemakeplaneOfficialVerified publisher3.7.12 of 13See more

plane-enterprise makeplane 3.7.1

2 of the 13 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.3
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

4,942
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/prometheus/prometheus@v0.54.1
0.311.3

Open the chart page →

4,137
mimir-syncmimir-sync3.1.01 of 1See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
github.com/prometheus/prometheus@v0.302.1
0.311.3

Open the chart page →

1,293
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

14,334
velero-s3-deploymentradar-baseVerified publisher0.4.21 of 4See more

velero-s3-deployment radar-base 0.4.2

1 of the 4 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/prometheus/prometheus@v0.54.1
0.311.3

Open the chart page →

4,798
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

11,869
scaffoldsigstoreVerified publisher0.6.1143 of 15See more

scaffold sigstore 0.6.114

3 of the 15 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
github.com/prometheus/prometheus@v0.51.0
0.311.3
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
github.com/prometheus/prometheus@v0.51.0
0.311.3
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
github.com/prometheus/prometheus@v0.51.0
0.311.3

Open the chart page →

7,710
smallest-self-hostsmallest-self-hostVerified publisher0.2.22 of 12See more

smallest-self-host smallest-self-host 0.2.2

2 of the 12 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/prometheus/prometheus@v0.49.0
0.311.3
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/prometheus/prometheus@v0.52.0
0.311.3

Open the chart page →

7,685
thanossolidchartsVerified publisher0.12.21 of 1See more

thanos solidcharts 0.12.2

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.3

Open the chart page →

196
thanosstevehipwell-helm-charts-thanosVerified publisher1.24.11 of 1See more

thanos stevehipwell-helm-charts-thanos 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
github.com/prometheus/prometheus@v0.309.1
0.311.3

Open the chart page →

196
stornxstornxVerified publisher1.1.13 of 9See more

stornx stornx 1.1.1

3 of the 9 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
istio/pilot:1.29.1f8b0e412ac4a
github.com/prometheus/prometheus@v0.306.0
0.311.3
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.0e5aab3be6873
github.com/prometheus/prometheus@v0.310.0
0.311.3
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
github.com/prometheus/prometheus@v0.304.2
0.311.3

Open the chart page →

11,574
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

10,090
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/prometheus/prometheus@v0.300.1
0.311.3

Open the chart page →

10,323
opentelemetry-kube-stackappscodeVerified publisher0.14.121 of 3See more

opentelemetry-kube-stack appscode 0.14.12

1 of the 3 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
github.com/prometheus/prometheus@v0.309.1
0.311.3

Open the chart page →

1,872
prom-label-proxyappscodeVerified publisher2026.7.151 of 1See more

prom-label-proxy appscode 2026.7.15

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/prom-label-proxy:v2026.4.2461344c13f17d
github.com/prometheus/prometheus@v0.311.2
0.311.3

Open the chart page →

179
thanos-operatorappscodeVerified publisher2026.6.21 of 1See more

thanos-operator appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
github.com/prometheus/prometheus@v0.308.1
0.311.3

Open the chart page →

371
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/prometheus/prometheus@v0.54.1
0.311.3
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

40,238
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

1,069
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/prometheus/prometheus@v0.54.0
0.311.3

Open the chart page →

45,363
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
github.com/prometheus/prometheus@v0.51.1
0.311.3

Open the chart page →

1,191
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/prometheus/prometheus@v0.52.0
0.311.3

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.12 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

2 of the 6 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/prometheus/prometheus@v0.52.0
0.311.3
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/prometheus/prometheus@v0.54.1
0.311.3

Open the chart page →

6,036
prometheusbook-k8sinfra-v226.0.12 of 6See more

prometheus book-k8sinfra-v2 26.0.1

2 of the 6 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/prometheus/prometheus@v0.55.0
0.311.3
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/prometheus/prometheus@v0.54.1
0.311.3

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/pyroscope:1.10.0319bf32ae06b
github.com/prometheus/prometheus@v0.51.2
0.311.3

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
github.com/prometheus/prometheus@v0.48.1
0.311.3

Open the chart page →

1,859
miniobysamioVerified publisher1.0.31 of 1See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

1,069
temporalcastaiVerified publisher0.54.23 of 14See more

temporal castai 0.54.2

3 of the 14 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/prometheus/prometheus@v0.49.0
0.311.3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/prometheus/prometheus@v0.52.0
0.311.3
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
github.com/prometheus/prometheus@v0.51.1
0.311.3

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.303 of 18See more

catalyst-agents catalyst-agents 0.1.30

3 of the 18 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/loki:3.0.0757b5fadf816
github.com/prometheus/prometheus@v0.51.0
0.311.3
grafana/loki-canary:3.0.028d7c00588aa
github.com/prometheus/prometheus@v0.51.0
0.311.3
grafana/tempo:2.5.0f0200a9bff6d
github.com/prometheus/prometheus@v0.48.1
0.311.3

Open the chart page →

15,027
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/prometheus/prometheus@v0.303.0
0.311.3

Open the chart page →

961
monitoringcluster-deploy0.3.05 of 11See more

monitoring cluster-deploy 0.3.0

5 of the 11 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
github.com/prometheus/prometheus@v0.303.1
0.311.3
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
github.com/prometheus/prometheus@v0.309.1
0.311.3
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
github.com/prometheus/prometheus@v0.307.3
0.311.3

Open the chart page →

8,183
loki-stackcommon-chartsVerified publisher1.0.31 of 12See more

loki-stack common-charts 1.0.3

1 of the 12 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/loki:3.6.1144148ad243c0
github.com/prometheus/prometheus@v0.311.2-0.20260410083055-07c6232d159b
0.311.3

Open the chart page →

5,329
cortex-proxycortex-proxyVerified publisher0.4.11 of 1See more

cortex-proxy cortex-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
github.com/prometheus/prometheus@v0.303.1
0.311.3

Open the chart page →

435
csghubcsghubVerified publisher2.4.34 of 34See more

csghub csghub 2.4.3

4 of the 34 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/prometheus/prometheus@v0.55.0
0.311.3
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/prometheus/prometheus@v0.303.0
0.311.3
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
github.com/prometheus/prometheus@v0.303.0
0.311.3
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/prometheus/prometheus@v0.54.0
0.311.3

Open the chart page →

58,897
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/prometheus/prometheus@v0.300.1
0.311.3

Open the chart page →

274
dapr-agentsdapr-agents-devVerified publisher0.1.57 of 31See more

dapr-agents dapr-agents-dev 0.1.5

7 of the 31 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/prometheus/prometheus@v0.303.1
0.311.3
grafana/loki:3.6.5847c287ada0e
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
grafana/loki-canary:3.6.5fbb984bab741
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.3
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/prometheus/prometheus@v0.309.2-0.20260113170727-c7bc56cf6c8f
0.311.3
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/prometheus/prometheus@v0.306.0
0.311.3
quay.io/prometheus-operator/prometheus-operator:v0.88.1d3d65efa3bee
github.com/prometheus/prometheus@v0.309.1
0.311.3

Open the chart page →

22,193
agent-helmdatasaker0.1.84 of 6See more

agent-helm datasaker 0.1.8

4 of the 6 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/prometheus/prometheus@v0.48.1
0.311.3
datasaker/dsk-kube-state-agent:latestd6d2eb48589d
github.com/prometheus/prometheus@v0.48.1
0.311.3
datasaker/dsk-node-agent:latest1b95913b6729
github.com/prometheus/prometheus@v0.48.1
0.311.3
datasaker/dsk-process-agent:latest2f38720a637d
github.com/prometheus/prometheus@v0.48.1
0.311.3

Open the chart page →

7,571
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/prometheus/prometheus@v0.49.0
0.311.3

Open the chart page →

4,509
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/prometheus/prometheus@v0.300.1
0.311.3

Open the chart page →

3,470
dnation-kubernetes-monitoring-stackdnationcloud4.0.23 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

3 of the 17 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.3
grafana/loki:3.2.0882e30c20683
github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb
0.311.3
grafana/loki-canary:3.2.049e03f80d361
github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb
0.311.3

Open the chart page →

21,641
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
github.com/prometheus/prometheus@v0.51.1
0.311.3

Open the chart page →

1,296
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
emqxecp/otelcol:2.5.04c31d9bec846
github.com/prometheus/prometheus@v0.54.1
0.311.3
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.1e2dc5623bcdd
github.com/prometheus/prometheus@v0.55.0
0.311.3
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
github.com/prometheus/prometheus@v0.54.1
0.311.3

Open the chart page →

23,685
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/prometheus/prometheus@v0.46.0
0.311.3

Open the chart page →

8,648
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.01 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/promtail:3.5.165bfae480b57
github.com/prometheus/prometheus@v0.302.1
0.311.3

Open the chart page →

5,748
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.25 of 18See more

farm-observability farm-observability 0.27.2

5 of the 18 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/prometheus/prometheus@v0.303.1
0.311.3
grafana/loki:3.6.73c8fd3570dd9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
grafana/loki-canary:3.6.70dac7d5cb383
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
grafana/tempo:2.9.065a578975943
github.com/prometheus/prometheus@v0.304.2
0.311.3
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
github.com/prometheus/prometheus@v0.301.0
0.311.3

Open the chart page →

13,255
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/prometheus/prometheus@v0.54.1
0.311.3

Open the chart page →

11,961
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/prometheus/prometheus@v0.52.0
0.311.3
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/prometheus/prometheus@v0.54.1
0.311.3

Open the chart page →

5,295
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-42151.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/prometheus/prometheus@v0.54.1
0.311.3

Open the chart page →

11,961

Container images carrying it

192 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
github.com/prometheus/prometheus@v0.303.0
0.311.3
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
github.com/prometheus/prometheus@v0.303.0
0.311.3
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
github.com/prometheus/prometheus@v0.301.0
0.311.3
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/prometheus/prometheus@v0.54.1
0.311.3
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
github.com/prometheus/prometheus@v0.300.1
0.311.3
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
github.com/prometheus/prometheus@v0.303.0
0.311.3
1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
prometheus@2.54.1-2
0.305.3
1
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/prometheus/prometheus@v0.55.1-0.20241102120812-a6fd22b9d2c8
0.311.3
1
datasaker/dsk-container-agent:latest08b52999f67b
github.com/prometheus/prometheus@v0.48.1
0.311.3
1
datasaker/dsk-kube-state-agent:latestd6d2eb48589d
github.com/prometheus/prometheus@v0.48.1
0.311.3
1
datasaker/dsk-node-agent:latest1b95913b6729
github.com/prometheus/prometheus@v0.48.1
0.311.3
1
datasaker/dsk-process-agent:latest2f38720a637d
github.com/prometheus/prometheus@v0.48.1
0.311.3
1
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/prometheus/prometheus@v0.49.0
0.311.3
1
devopsfaith/krakend:2.6.34c678c224f67
github.com/prometheus/prometheus@v0.51.1
0.311.3
1
devopsfaith/krakend:2.7.09219cda867e2
github.com/prometheus/prometheus@v0.51.1
0.311.3
1
emqxecp/otelcol:2.5.04c31d9bec846
github.com/prometheus/prometheus@v0.54.1
0.311.3
1
flashcatcloud/nightingale:8.5.1421acb36181b
github.com/prometheus/prometheus@v0.47.1
0.311.3
1
fluxninja/aperture-operator:2.34.0356d7aa86632
github.com/prometheus/prometheus@v0.48.1
0.311.3
1
gomods/athens:v0.17.10f61d1e62359
github.com/prometheus/prometheus@v0.311.2
0.311.3
1
grafana/grafana:13.0.10f86bada30d6
github.com/prometheus/prometheus@v0.303.1
0.311.3
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
github.com/prometheus/prometheus@v0.303.1
0.311.3
1
grafana/grafana:12.2.22ebef928d7e5
github.com/prometheus/prometheus@v0.303.1
0.311.3
1
grafana/grafana:12.2.135c41e0fd029
github.com/prometheus/prometheus@v0.303.1
0.311.3
1
grafana/grafana:11.2.2-security-01464eac539793
github.com/prometheus/prometheus@v0.52.0
0.311.3
1
grafana/grafana:11.5.15781759b3d27
github.com/prometheus/prometheus@v0.52.0
0.311.3
1
grafana/grafana:11.6.062d2b9d20a19
github.com/prometheus/prometheus@v0.301.0
0.311.3
1
grafana/grafana:12.3.070d9599b186c
github.com/prometheus/prometheus@v0.303.1
0.311.3
1
grafana/grafana:12.2.074144189b384
github.com/prometheus/prometheus@v0.303.1
0.311.3
1
grafana/grafana:11.5.28b37a2f028f1
github.com/prometheus/prometheus@v0.52.0
0.311.3
1
grafana/grafana:12.1.1a1701c218024
github.com/prometheus/prometheus@v0.303.1
0.311.3
1
grafana/grafana:10.4.19a9043254ba16
github.com/prometheus/prometheus@v0.49.0
0.311.3
1
grafana/grafana:11.1.3b23b588cf7cb
github.com/prometheus/prometheus@v0.52.0
0.311.3
1
grafana/grafana:12.0.2b5b59bfc7561
github.com/prometheus/prometheus@v0.301.0
0.311.3
1
grafana/grafana:12.3.2ba93c9d192e5
github.com/prometheus/prometheus@v0.303.1
0.311.3
1
grafana/grafana:10.4.0f9811e4e687f
github.com/prometheus/prometheus@v0.49.0
0.311.3
1
grafana/grafana:11.3.1fa801ab6e1ae
github.com/prometheus/prometheus@v0.52.0
0.311.3
1
grafana/loki:3.0.0757b5fadf816
github.com/prometheus/prometheus@v0.51.0
0.311.3
1
grafana/loki:3.6.5847c287ada0e
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
1
grafana/loki:3.2.0882e30c20683
github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb
0.311.3
1
grafana/loki:3.3.28af2de1abbdd
github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb
0.311.3
1
grafana/loki:3.6.192bd5700577b
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
1
grafana/loki:3.6.3cd6e176883a9
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
1
grafana/loki-canary:3.0.028d7c00588aa
github.com/prometheus/prometheus@v0.51.0
0.311.3
1
grafana/loki-canary:3.1.039baf6d67f85
github.com/prometheus/prometheus@v0.51.0
0.311.3
1
grafana/loki-canary:3.2.049e03f80d361
github.com/prometheus/prometheus@v0.53.2-0.20240726125539-d4f098ae80fb
0.311.3
1
grafana/loki-canary:3.6.5fbb984bab741
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/prometheus/prometheus@v0.304.3-0.20250703114031-419d436a447a
0.311.3
1
grafana/promtail:3.5.165bfae480b57
github.com/prometheus/prometheus@v0.302.1
0.311.3
1
grafana/promtail:3.6.18dcfdf466da0
github.com/prometheus/prometheus@v0.305.1-0.20250806170547-208187eaa19b
0.311.3
1
grafana/promtail:3.0.0d3de3da9431c
github.com/prometheus/prometheus@v0.51.0
0.311.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.