prometheus vulnerabilities (Bitnami)

5 vulnerabilities.

• prometheus Bitnami Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI CVE-2026-44903 Fix available 5.1 MediumMay 5, 2026
• prometheus Bitnami Prometheus: remote read endpoint allows denial of service via crafted snappy payload CVE-2026-42154 Public exploitFix available 7.5 HighMay 4, 2026
• prometheus Bitnami Prometheus Azure AD remote write OAuth client secret exposed via config API CVE-2026-42151 Fix available 7.5 HighMay 4, 2026
• prometheus Bitnami Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer CVE-2026-40179 Public exploitFix available 5.3 MediumApril 13, 2026
• prometheus Bitnami Arbitrary redirects under /new endpoint CVE-2021-29622 Fix available EPSS 19.6% 6.5 MediumMay 19, 2021