prometheus3.13 vulnerabilities (Red Hat)
12 vulnerabilities.
-
prometheus3.13Red Hat shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token 9.2 Critical -
prometheus3.13Red Hat Panic parsing crafted input in x/text/secure/precis in golang.org/x/text 7.5 High -
prometheus3.13Red Hat go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal 8.7 High -
prometheus3.13Red Hat PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure 7.5 High -
prometheus3.13Red Hat nanoid: Integer Overflow or Wraparound 7.4 High -
prometheus3.13Red Hat PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset 6.3 Medium -
prometheus3.13Red Hat React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass) 5.1 Medium -
prometheus3.13Red Hat Infinite loop on invalid input in golang.org/x/text 7.5 High -
prometheus3.13Red Hat go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header 6.9 Medium -
prometheus3.13Red Hat Vitest browser mode serves unsanitized otelCarrier query parameter as inline script 9.6 Critical -
prometheus3.13Red Hat Vitest: Arbitrary file can be read and executed when Vitest UI server is listening 9.8 Critical -
prometheus3.13Red Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High