tocsin

Go/github.com/prometheus/prometheus/v2: high 7.2

Prometheus vulnerable to basic authentication bypass

Action: Upgrade github.com/prometheus/prometheus/v2 to 2.37.4 or later.

go get github.com/prometheus/prometheus/v2@v2.37.4
go get github.com/prometheus/prometheus/v2@v2.40.4

Affected

introducedfixedlast affected
2.24.12.37.4-
2.38.02.40.4-

Fixed versions

2.37.42.40.4

Sources

published · modified · JSON