prometheus vulnerabilities (Alpine)

5 vulnerabilities.

• prometheus Alpine Prometheus: remote read endpoint allows denial of service via crafted snappy payload CVE-2026-42154 Public exploitFix available 7.5 HighMay 4, 2026
• prometheus Alpine Prometheus Azure AD remote write OAuth client secret exposed via config API CVE-2026-42151 Fix available 7.5 HighMay 4, 2026
• prometheus Alpine Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer CVE-2026-40179 Public exploitFix available 5.3 MediumApril 13, 2026
• prometheus Alpine Prometheus Exporter Toolkit vulnerable to basic authentication bypass CVE-2022-46146 Fix available 6.2 MediumNovember 29, 2022
• prometheus Alpine Arbitrary redirects under /new endpoint CVE-2021-29622 Fix available EPSS 19.6% 6.5 MediumMay 19, 2021