{"action":"Upgrade github.com/prometheus/client_golang to 1.11.1 or later.","affected":[{"fixed":"1.11.1","introduced":"0"}],"component":"github.com/prometheus/client_golang","cve_ids":["CVE-2022-21698"],"ecosystem":"Go","epss":0.05994,"exploited":false,"fixed_versions":["1.11.1"],"ghsa_id":"GHSA-cg3q-j54f-5p7p","id":"tcs_01M5KF78K5PZASQ13PRVJFAHBQ","modified_at":"2026-09-10T03:49:28.070124367Z","published_at":"2022-02-16T22:26:35Z","references":["https://osv.dev/vulnerability/GHSA-cg3q-j54f-5p7p","https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p","https://nvd.nist.gov/vuln/detail/CVE-2022-21698","https://github.com/prometheus/client_golang/pull/962","https://github.com/prometheus/client_golang/pull/987","https://pkg.go.dev/vuln/GO-2022-0322","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKORFJTRRDJCWBTJPISKKCVMMMJBIRLG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SASRKYHT5ZFSVMJUQUG3UAEQRJYGJKAR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RN7JGC2LVHPEGSJYODFUV5FEKPBVG4D7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MH6ALXEQXIFQRQFNJ5Y2MJ5DFPIX76VN","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KBMVIQFKQDSSTHVVJWJ4QH6TW3JVB7XZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HLAQRRGNSO5MYCPAXGPH2OCSHOGHSQMQ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FY3N7H6VSDZM37B4SKM2PFFCUWU7QYWN","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AK7CJBCGERCRXYUR2EWDSSDVAQMTAZGX","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7V7I72LSQ3IET3QJR6QPAVGJZ4CBDLN5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5OGNAFVXSMTTT2UPH6CS3IH6L3KM42Q7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4KDETHL5XCT6RZN2BBNOCEXRZ2W3SFU3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3L6GDN5S5QZSCFKWD3GKL2RDZQ6B4UWA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36GUEPA5TPSC57DZTPYPBL6T7UPQ2FRH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2PFW6Q2LXXWTFRTMTRN4ZGADFRQPKJ3D","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2IK53GWZ475OQ6ENABKMJMTOBZG6LXUR","https://github.com/prometheus/client_golang/releases/tag/v1.11.1","https://github.com/prometheus/client_golang"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cg3q-j54f-5p7p","url":"https://osv.dev/vulnerability/GHSA-cg3q-j54f-5p7p"}],"summary":"Uncontrolled Resource Consumption in promhttp"}